CVE-2020-18717

creationtimestamp| type| source ---|---|--- 2021-02-05 16:35:21+00:00| seen| https://t.me/cibsecurity/23150...

CVE-2020-18717

SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzztemplate.php...

CVE-2020-18717

The CVE-2020-18717 entry concerns ZZZCMS zzzphp 1.7.1, where a SQL injection due to lack of parameter filtering in inc/zzz_template.php allows remote code execution. Public sources classify the impact as high/critical (NVD CVSS v3.1: 9.8; v2: 7.5). The affected component is the zzz_template.php p...

CVE-2017-18717

creationtimestamp| type| source ---|---|--- 2020-04-24 18:37:15+00:00| seen| https://t.me/cibsecurity/11624...

CVE-2017-18717

CVE-2017-18717 affects several NETGEAR devices (D6200 prior to 1.1.00.24; R6700v2, R6800, R6900v2 prior to 1.1.0.42). It is a stack-based buffer overflow exploitable by an unauthenticated attacker. The available documents confirm the affected models and versions and the nature of the overflow, bu...

CVE-2019-18717

CVE-2019-18717 is rejected/not used; this candidate has been withdrawn.

CVE-2019-18717

...

CVE-2018-18717

CVE-2018-18717 affects Eleanor CMS up to 2015-03-19. It is an XSS vulnerability exploitable through the AJAX endpoint ajax.php?direct=admin&file=autocomplete&query=[XSS] where the attacker-controlled query is reflected in the response. NVD lists CVSSv2 base 3.5 (LOW) and CVSSv3 base 4.8 (MEDIUM)....