CVE-2019-17373

Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL. This affects MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, and WNR834Bv2...

NETGEAR DGND3700 Authentication Bypass Vulnerability (Dec 2020)

NETGEAR DGN3700 devices are prone to an authentication bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2017-17373

CVE-2017-17373 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-17373

...

CVE-2020-17373

SugarCRM before 10.1.0 Q3 2020 allows SQL Injection...

CVE-2020-17373

CVE-2020-17373 affects SugarCRM prior to 10.1.0 (Q3 2020). The vulnerability is an SQL Injection in the Reports Export path, tied to unsanitized input (notably via the encoded current_post parameter in index.php when module=Reports/export). This can allow remote attackers to craft SQL that leaks ...

SugarCRM SQL Injection

SugarCRM $user, "password" = $pass, "granttype" = "password", "clientid" = "sugar"; curlsetopt$ch, CURLOPTURL, "$urlrest/v10/oauth2/token"; curlsetopt$ch, CURLOPTPOST, true; curlsetopt$ch, CURLOPTPOSTFIELDS, jsonencode$params; curlsetopt$ch, CURLOPTHTTPHEADER, "Content-Type: application/json";...

CVE-2019-17373

Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL. This affects MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, and WNR834Bv2...

CVE-2019-17373

CVE-2019-17373 affects several NETGEAR devices (MBR1515/1516, DGN2200/2200M, DGND3700, WNR2000v2, WNDR3300/3400, WNR3500, WNR834Bv2). The issue is an unauthenticated access vulnerability that lets an attacker reach critical .cgi and .htm pages by manipulating a URL with a substring ending in .jpg...