11 matches found
CVE-2020-17364
USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...
CVE-2019-17364
The processCommandUploadLog function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...
CVE-2019-17364
creationtimestamp| type| source ---|---|--- 2024-03-12 08:12:29+00:00| seen| https://t.me/ctinow/205359...
CVE-2017-17364
...
CVE-2017-17364
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-17364
USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...
CVE-2020-17364
CVE-2020-17364 affects USVN (User-friendly SVN) prior to 1.0.9. The issue is an XSS vulnerability that can be triggered via SVN logs, with CVSS v3.1 base score 6.1 (NETWORK, LOW attack complexity, NONE privileges, UI REQUIRED, scope CHANGED; confidentiality/integrity impact LOW, availability NONE...
CVE-2019-17364
CVE-2019-17364 affects Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30, where the function processCommandUploadLog() in libcommon.so allows remote attackers to execute arbitrary system commands as the root user. This yields a critical (CVSS v3.1: 9.8) impact with network access, no privi...
CVE-2018-17364
CVE-2018-17364 affects OTCMS 3.61, where remote attackers can execute arbitrary PHP code via the accBackupDir parameter. Attack vector is network-based; exploitation details are not provided beyond the parameter abuse. Root cause: unvalidated/unsafe handling of accBackupDir allows code execution....
CVE-2018-17364
OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter...
decathlon.in XSS vulnerability
Vulnerable URL: http://www.decathlon.in/1627-archery-darts-bowls?icm="'--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17364 VIP website status:| Yes Check decathlon.in SSL connection:| Grade: F Coordinated...