CVE-2022-30810

elitecms v1.01 is vulnerable to SQL Injection via admin/editpost.php...

CVE-2022-30816

elitecms 1.01 is vulnerable to SQL Injection via /admin/editsidebar.php...

Sql injection

elitecms 1.01 is vulnerable to SQL Injection via /admin/addpost.php...

Sql injection

elitecms 1.01 is vulnerable to SQL Injection via admin/editsidebar.php?page=2&sidebar=...

Sql injection

elitecms 1.01 is vulnerable to SQL Injection via /admin/editpage.php?page=...

elitecms SQL注入漏洞

Elitecms is a Web content management from elitecms India. elitecms version 1.01 has a SQL injection vulnerability that originates from the /admin/addsidebar.php page's lack of validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal...

elitecms SQL注入漏洞

Elitecms is a web content management from elitecms India. elitecms version 1.01 is vulnerable to SQL injection, which originates from admin/editsidebar.php?page=2 & sidebar The page sidebar parameter lacks validation for external input SQL statements, and an attacker could exploit the vulnerabili...

elitecms SQL注入漏洞

Elitecms is a web content management by elitecms India. elitecms version 1.01 has a SQL injection vulnerability, which originates from the /admin/editsidebar.php page page parameter lack of validation of external input SQL statements, an attacker can use this vulnerability to execute illegal SQL...

elitecms 代码问题漏洞

Elitecms is a web content management from elitecms India. elitecms 1.01 has an arbitrary code execution vulnerability that can be exploited by attackers to execute arbitrary code attacks via admin/manageuploads.php...

CVE-2022-30809

CVE-2022-30809 affects elitecms 1.01, with a SQL injection vulnerability in /admin/edit_page.php?page=. The issue arises from lack of input validation on external input used to construct SQL statements, enabling an attacker to execute arbitrary SQL commands and potentially access or modify the da...

CVE-2022-30815

Elitecms 1.01 is vulnerable to SQL injection via admin/edit_sidebar.php?page=2&sidebar due to lack of input validation on the sidebar parameter. This can allow attackers to execute arbitrary SQL and access sensitive data. No published fix is provided in the connected documents; remediation status...

DLINK DAP-1620 A1 v1.01 - Directory Traversal

Exploit Title: DLINK DAP-1620 A1 v1.01 - Directory Traversal Date: 27/4/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://me.dlink.com/consumer Version: DAP-1620 - A1 v1.01 Tested on: Linux CVE : CVE-2021-46381 POST /apply.cgi HTTP/1.1 Content-Type:...

CVE-2022-24862

Databasir 1.01 contains a Server-Side Request Forgery (SSRF) flaw in the JDBC driver download verification process: the download URL is fetched, but accessing a non-existent URL returns a full error page. This behavior can be exploited for SSRF. Exploitation details, impact scope, and fixes are n...

Databasir 代码问题漏洞

Databasir is a team-oriented relational database model document management platform. A security vulnerability exists in Databasir 1.01. The vulnerability stems from the fact that during the JDBC driver download validation process, the corresponding JDBC driver download address is downloaded first...

CVE-2022-24860 Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP address...

CVE-2020-36056

Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.0955 was discovered to contain a cross-site scripting XSS vulnerability via the Ping diagnostic option...

CVE-2020-36056

Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.0955 was discovered to contain a cross-site scripting XSS vulnerability via the Ping diagnostic option...

SLICAN WebCTI Cross-Site Scripting Vulnerability

SLICAN WebCTI is a telephony application. A cross-site scripting vulnerability exists in SLICAN WebCTI version 1.01 2015, which can be exploited by an attacker to steal a user's session by injecting malicious JavaScript code, which can lead to session hijacking and result in theft of user...

SLICAN WebCTI 跨站脚本漏洞

SLICAN WebCTI is a telephony application. A cross-site scripting vulnerability exists in SLICAN WebCTI version 1.01 2015, which can be exploited by an attacker to steal a user's session by injecting malicious JavaScript code, which can lead to session hijacking and result in theft of user...

CVE-2021-38339 Simple Matted Thumbnails <= 1.01 Reflected Cross-Site Scripting

The Simple Matted Thumbnails WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /simple-matted-thumbnail.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.01...