26 matches found
Yahei PHP Prober 0.4.7 - Cross-Site Scripting
Exploit title: Yahei-PHP Proberv0.4.7 - Cross-Site Scripting Google Dork: intitle:"Proberv0." | inurl:/proberv.php Date: 23/03/2018 Exploit Author: ManhNho Vendor Homepage: http://www.yahei.net/ Software Link: www.yahei.net/tz/tze.zip Version: 0.4.7 CVE: CVE-2018-9238 Tested on: Windows 10 / Kali...
CVE-2018-9238
CVE-2018-9238 affects Yahei-PHP Proberv 0.4.7, where a cross-site scripting vulnerability exists in the file proberv.php via the funName parameter. The CVE entry documents an XSS condition, with public exploit references (Exploit-DB, ExploitPack, PacketStorm) that describe a PoC demonstrating a P...
CVE-2016-9238
CVE-2016-9238 entry is rejected/not used per the Initial Description.
CVE-2014-9238
The CVE-2014-9238 entry concerns the D-Link DCS-2103 IP camera with firmware 1.0.0. The issue is a remote path disclosure vulnerability: an attacker can obtain the installation path by supplying a file parameter to cgi-bin/sddownload.cgi, demonstrated by a forward slash character. This affects th...
