Lucene search
K

12 matches found

CNNVD
CNNVD
added 2026/05/13 12:0 a.m.6 views

Web::Passwd 操作系统命令注入漏洞

Web::Passwd is a Perl module developed by EVANK personal developers, used for managing password files and handling identity authentication in web applications. Versions of Web::Passwd prior to 0.03 contained a vulnerability related to operating system command injection. This vulnerability stemmed...

9.8CVSS6.2AI score0.00097EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/01/29 12:0 a.m.3 views

Buffalo LS210D Security Vulnerability

Buffalo LS210D is a hard disk drive from Buffalo Japan. A security vulnerability exists in the Buffalo LS210D version 1.78-0.03. A remote attacker can exploit this vulnerability to inject arbitrary commands into the NAS as root...

7.2CVSS7.1AI score0.0147EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/11 12:0 a.m.3 views

Buffalo LS210D Security Vulnerability

The Buffalo LS210D is a hard disk drive from Buffalo Japan. A security vulnerability exists in the Buffalo LS210D version v.1.78-0.03 that originates from a vulnerability that could allow a remote attacker to execute arbitrary code via the firmware update script in...

8.1CVSS7.7AI score0.26025EPSS
Exploits1References4
OSV
OSV
added 2023/04/11 9:15 a.m.3 views

CVE-2023-26588

Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016...

7.5CVSS6.9AI score0.00322EPSS
Exploits0References2
OSV
OSV
added 2023/04/11 9:15 a.m.1 views

CVE-2023-24544

Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the product settings may be altered. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier,...

8.1CVSS6.8AI score0.00085EPSS
Exploits0References2
NVD
NVD
added 2008/09/19 5:15 p.m.9 views

CVE-2008-4134

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter...

7.5CVSS7.6AI score0.04529EPSS
Exploits0References7
Cvelist
Cvelist
added 2008/09/19 5:4 p.m.11 views

CVE-2008-4134

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter...

7.6AI score0.04529EPSS
Exploits0References7
0day.today
0day.today
added 2008/09/17 12:0 a.m.16 views

phpRealty 0.3 (INC) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================= phpRealty 0.3 INC Remote File Inclusion Vulnerability ======================================================= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpRealty Vul...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2008/09/17 12:0 a.m.13 views

phpRealty 0.3 - INC Remote File Inclusion

phpRealty 0.3 - INC Remote File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpRealty D.O.M Labs - Security Researchers - www.domlabs.org vuln code: ------------- 11: if!isset$GET'propID' || !isnumeric$GET'propID' || empty$GET'propID' 13: return; 17:...

0.3AI score
Exploits0
Packet Storm
Packet Storm
added 2006/10/24 12:0 a.m.23 views

NetDNS0.3.txt

ToXiC NetDNS: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: NetDNS-0.03 Sorce Code: http://gentoo.osuosl.org/distfiles/NetDNS-0.03.tgz Page: RR.php Dir : /DNS/ Problem: / Include files / requireonce"$phpdnsbasedir/DNS/RR/A.php";...

7.4AI score
Exploits0
Cvelist
Cvelist
added 2005/07/17 4:0 a.m.15 views

CVE-2004-2245

Cross-site scripting XSS vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the 1 page parameter to viewalbum.php or 2 btopage parameter to viewpic.php...

5.7AI score0.01254EPSS
Exploits1References7
CVE
CVE
added 2005/07/17 4:0 a.m.75 views

CVE-2004-2245

Goollery is affected by multiple XSS in viewalbum.php (via the page parameter) and viewpic.php (via the btopage parameter). The CVE entry documents a reflected XSS vulnerability in Goollery 0.03 that allows remote attackers to inject arbitrary HTML/JS in a user’s browser. OpenVAS/Nessus entries c...

4.3CVSS5.8AI score0.01254EPSS
Exploits1References7Affected Software1
Rows per page
Query Builder