Exploit for Code Injection in Paradox Ipr512_Firmware

Injection vulnerability in Paradox Security Systems IPR512 - C...

Directory traversal

Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information remote. The component is: URL : view-source:https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig...

CVE-2022-37700: Improper Limitation of a Pathname to a Restricted Directory

Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information remote. The component is: URL : view-source:https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig...

PT-2021-10696

Name of the Vulnerable Software and Affected Versions: Motorola CX2 router version 1.0.2 Build 20190508 Rel.97360n Description: A vulnerability in the /Login.html endpoint of the Motorola CX2 router allows attackers to bypass login and obtain a partially authorized token and uid. Recommendations:...

CVE-2020-21932: Improper Authentication

A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially authorized token and uid...

PT-2021-10128

Name of the Vulnerable Software and Affected Versions: yzmCMS version 5.2 Description: The issue allows remote attackers to execute arbitrary code by injecting commands into the referer field of a POST request to the "/member/index/login.html" API endpoint when logging in. This is a Cross Site...

CVE-2020-18084: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in...

CVE-2021-25894: Improper Neutralization of Input During Web Page Generation

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting XSS vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter...

PT-2021-16828

Name of the Vulnerable Software and Affected Versions Magnolia CMS versions 6.1.3 through 6.2.3 Description The issue is related to a stored cross-site scripting XSS vulnerability. It affects the /magnoliaPublic/travel/members/login.html API endpoint, specifically the mgnlUserId parameter...

CVE-2019-19517

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

Cross site request forgery (csrf)

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

CVE-2019-19517

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

PT-2020-10178

Name of the Vulnerable Software and Affected Versions Intelbras RF1200 version 1.1.3 Description The issue allows Cross-Site Request Forgery CSRF to bypass the login.html form. This can be demonstrated by launching a scrapy process, which shows how the form can be bypassed. Recommendations For...

CVE-2019-19517: Cross-Site Request Forgery (CSRF)

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

Optergy 2.3.0a - Username Disclosure

Optergy 2.3.0a - Username Disclosure Title: Optergy 2.3.0a - Username Disclosure Author: LiquidWorm Date: 2019-11-05 Vendor: https://optergy.com/ Product web page: https://optergy.com/products/ Affected version: djuro teppi view alerton stef humba drmio de3 andri myko dzonka kosto beebee...

Design/Logic Flaw

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0...

CVE-2010-5336

The CVE-2010-5336 issue affects IceWarp Webclient prior to 10.2.1, where an XSS vulnerability is triggered by an HTTP POST to admin/login.html with the username parameter. The root cause is lack of input validation/escapes for client-side data within the Webclient Web application. Impact is clien...

PT-2019-6604

Name of the Vulnerable Software and Affected Versions IceWarp Webclient versions 10.2.0 through 10.2.0 Description The issue is related to a persistent XSS vulnerability via an HTTP POST request to the "admin/login.html" endpoint with the username parameter. Recommendations For IceWarp Webclient...

CVE-2010-5336: Improper Neutralization of Input During Web Page Generation

IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0...

CVE-2019-15805

CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/login.html. Any user connected to the Wi-Fi can exploit this...