2946 matches found
CVE-2021-30147
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php...
CVE-2021-30147
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php...
CVE-2021-30147
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php...
PT-2021-18632
Name of the Vulnerable Software and Affected Versions DMA Softlab Radius Manager version 4.4.0 Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can lead to impacts such as adding new manager accounts via the admin.php endpoint. The estimated number of potentially...
CVE-2021-30147: Cross-Site Request Forgery (CSRF)
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php...
Piwigo SQL Injection Vulnerability (CNVD-2021-25958)
Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in versions prior to Piwigo 11.4.0. An attacker can exploit this vulnerability by using the language parameter of admin.php?page=languages to conduct a SQL injection attack...
PT-2021-15723
Name of the Vulnerable Software and Affected Versions: File Manager WordPress plugin versions prior to 7.1 Description: A Reflected XSS issue can occur in the default configuration of the plugin when a payload is submitted on the User-Agent parameter. This payload is then reflected back on the we...
CVE-2021-24177: Improper Neutralization of Input During Web Page Generation
In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint /wp-admin/admin.php?page=wpfilemanagerproperties when a payload is submitted on the User-Agent parameter. The payload is then reflected back on the web application response...
Sql injection
SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages...
CVE-2021-27973
SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages...
CVE-2021-27973
Piwigo has a SQL injection vulnerability (CVE-2021-27973) in versions before 11.4.0, exploitable via the language parameter of admin.php?page=languages. Public writeups/exploits exist for 11.3.0 (e.g., Exploit-DB, PacketStorm) and CVE records note the issue. The CVE entry itself has no confirmed ...
CVE-2021-27973
SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages...
Cross site scripting
DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting XSS via the description, name, or address field under admin.php...
CVE-2021-29011
CVE-2021-29011 affects DMA Softlab Radius Manager 4.4.0 and is described as a Cross Site Scripting (XSS) vulnerability exploitable via the description, name, or address fields under admin.php. The connected documents corroborate an XSS issue with this version; CVSS metrics in the primary entry sh...
PT-2021-18024
Name of the Vulnerable Software and Affected Versions: DMA Softlab Radius Manager version 4.4.0 Description: The issue is related to Cross Site Scripting XSS that can be triggered via the description, name, or address field under the admin.php endpoint. This allows for potential malicious script...
PT-2021-17700
Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 11.4.0 Description: A SQL injection issue exists via the language parameter to the "admin.php?page=languages" API endpoint. Recommendations: For versions prior to 11.4.0, update to version 11.4.0 or later to resolve t...
CVE-2021-27973: Improper Neutralization of Special Elements used in an SQL Command
SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages...
CVE-2021-29011: Improper Neutralization of Input During Web Page Generation
DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting XSS via the description, name, or address field under admin.php...
