592 matches found
LOYTEC electronics GmbH LINX Configurator Security Breach
LOYTEC electronics GmbH LINX Configurator is a tool from the Austrian company LOYTEC electronics GmbH for configuring and managing devices on its LINX platform. A security vulnerability in LOYTEC electronics GmbH LINX Configurator version 7.4.10, which stems from the failure to encrypt the...
Tecno TR118 Security Vulnerability
Tecno TR118 is a portable 4G WiFi from Tecno China. A security vulnerability exists in the Tecno TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830 version, which stems from an incorrect manipulation of the parameter url that can lead to OS command injection...
UBUNTU-CVE-2023-38316
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt...
VulnCheck KEV: CVE-2022-0591
The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3get AJAX action, leading to SSRF issues exploitable by unauthenticated users...
XWiki Platform Security Vulnerability
XWiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the XWiki Foundation in France. A security vulnerability exists in XWiki Platform that stems from not properly escaping a URL parameter in the code used to display the administration section...
CVE-2023-45325
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-45325
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database...
Sql injection
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-45325 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database...
Online Food Ordering System SQL Injection Vulnerability
Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the address parameter on the routers/add-users.php page...
Airtel 707GR1 Cross-Site Scripting Vulnerability
The Airtel 707GR1 is a wireless router from Airtel. The Airtel 707GR1 suffers from a cross-site scripting vulnerability that stems from the presence of an unknown function in the component Ping Diagnostics that leads to cross-site scripting via the Host Address parameter...
CVE-2023-44075
Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...
CVE-2023-44075
Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...
CVE-2023-44075
Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...
Cross site scripting
Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...
CVE-2023-44075
Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...
CVE-2023-44075
Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...
PHPGurukul Small CRM Cross-Site Scripting Vulnerability
PHPGurukul Small CRM is a customer relationship management system. A cross-site scripting vulnerability exists in PHPGurukul Small CRM version v.3.0, which stems from the presence of a cross-site scripting XSS vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via...
PT-2023-29087 · Unknown · Small Crm In Php
Name of the Vulnerable Software and Affected Versions: Small CRM in PHP version 3.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Sma...