CVE-2020-6868

The CVE-2020-6868 entry concerns a ZTE F680 PON gateway (V9.0.10P1N6) with an input validation flaw in the WAN-connection creation interface exposed via WEB management. The front-end enforces a length limit on the WAN connection name, but an HTTP proxy can bypass this limit, allowing an attacker ...

CVE-2018-6868

CVE-2018-6868 affects PHP Scripts Mall Slickdeals/DealNews/Groupon Clone Script 3.0.2. The issue is a Cross-Site Scripting vulnerability exposed via a User Profile Field parameter in the web app. PoC and multiple public exploits indicate a stored XSS vector, demonstrated in PoC examples (e.g., sc...

Groupon Clone Script 3.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Slickdeals/DealNews/Groupon Clone Script 3.0.2 – Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Category: Web Application Exploit Author:...

Groupon Clone Script 3.0.2 Cross Site Scripting

Exploit Title: Slickdeals/DealNews/Groupon Clone Script 3.0.2 a Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web:...

Groupon Clone Script 3.0.2 - Cross-Site Scripting

Groupon Clone Script 3.0.2 - Cross-Site Scripting. CVE-2018-6868. Webapps exploit for PHP platform Exploit Title: Slickdeals/DealNews/Groupon Clone Script 3.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

Groupon Clone Script 3.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Slickdeals/DealNews/Groupon Clone Script 3.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Category: Web Application...

CVE-2017-6868

An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauthenticated remote attacker may be able to perform administrative actions on the Communication Process CP of the RNA series module, if network access to Port 102/TCP is available a...

CVE-2017-6868

CVE-2017-6868 affects Siemens SIMATIC CP 44x-1 RNA modules (all versions before 1.4.1). An unauthenticated remote attacker who can reach Port 102/TCP and where the CP configuration file is stored on the RNA’s CPU may perform administrative actions on the CP through an improper authentication flaw...

Siemens SIMATIC CP 44x-1 Redundant Network Access Modules

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIMATIC CP 44x-1 Redundant Network Access RNA modules Vulnerability: Improper Authentication AFFECTED PRODUCTS The following versions of the SIMATIC CP 44x-1 RNA, which connect SIMATIC S7-400 CPUs t...

CVE-2015-6868

...

CVE-2015-6868

CVE-2015-6868 entry is rejected/not used; not an active vulnerability.

Fedora Update for mingw-libgcrypt FEDORA-2015-6868

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-6868

CVE-2013-6868 affects SAP Sybase ASE: versions 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or SP100. The vulnerability is a local information disclosure, arising from an unspecified vector, allowing local users to obtain sensitive data. The initial descriptio...

CVE-2008-6868

CVE-2008-6868 is an XSS vulnerability affecting EditeurScripts products, notably EditeurScripts EsBaseAdmin 2.1 (default/login.php), where the msg parameter can inject arbitrary script/HTML. OpenVAS details indicate the issue stems from insufficient sanitization of user-supplied data across multi...

CVE-2006-6868

CVE-2006-6868 affects Zen Cart Web Shopping Cart prior to 1.3.7. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to the NVD entry, the CVSS v2 base score is 6.8 (Mediu...