Ruckus Wireless Unleashed emfd Arbitrary OS Command Execution Vulnerability

Ruckus Wireless Unleashed is a wireless virtual control device. The Ruckus Wireless Unleashed emfd admin/cmdstat.jsp fails to properly handle the xcmd=import-category attribute, which can be exploited by a remote attacker to submit a special POST request that can be used in the application contex...

Design/Logic Flaw

A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4....

Code injection

A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 allows remote attackers to retrieve the configuration, including sensitive data usernames and passwords. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R...

CVE-2019-19822

The CVE-2019-19822 entry concerns Realtek SDK-based routers (Boa HTTP server using Realtek APMIB 0.11f) where unauthenticated remote attackers can retrieve the full router configuration (including credentials) via the config.dat file. Affected devices include TOTOLINK A3002RU (up to 2.0.0), A702R...

CVE-2019-19823

CVE-2019-19823 affects Realtek SDK-based routers (Boa 0.94.14rc21) used by TOTOLINK, Sapido, CIK Telecom, Fibergate, and others. The issue allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, by accessing the config.dat/file storage...

CVE-2019-19823

A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4....

CVE-2017-14807

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and modification of data. This issue affects:...

Debian DSA-4604-1 : cacti - security update

Multiple issues have been found in cacti, a server monitoring system, potentially resulting in SQL code execution or information disclosure by authenticated users. - CVE-2019-16723 Authenticated users may bypass authorization checks for viewing a graph by submitting requests with modified...

Privilege escalation

An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with lowest privileges to give herself highest administration privileges via a crafted PUT request to an unauthorized resource...

[SECURITY] Fedora 31 Update: phpMyAdmin-5.0.1-1.fc31

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

[SECURITY] Fedora 30 Update: phpMyAdmin-4.9.4-1.fc30

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

CVE-2020-7106

Cacti 1.2.8 has stored XSS in datasources.php, colortemplatesitem.php, graphs.php, graphitems.php, lib/apiautomation.php, useradmin.php, and usergroupadmin.php, as demonstrated by the description parameter in datasources.php a raw string from the database that is displayed by $header to trigger t...

CVE-2019-18271

OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site...

Cross site request forgery (csrf)

OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site...

CVE-2019-20209

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference IDOR via wp-admin/admin-ajax.php to delete any page/post/listing...

SQL Injection Vulnerability in the Background Administration C***t.asp Page of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system background management Ct.asp page there is a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

Fedora Update for glpi FEDORA-2019-311441d430

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in the Background Administration A***t.asp Page of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system background management At.asp page SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

CODOFORUM Cross-Site Scripting Vulnerability

Codoforum is a free forum package built with PHP and MySQL. A cross-site scripting vulnerability exists in the administration dashboard in Codoforum 4.8.3. The vulnerability can be exploited to conduct a cross-site scripting attack via the Categories in the Manage Users screen...

DTEN D5 and DTEN D7 Code Execution Vulnerabilities

The DTEN D5 and DTEN D7 are both stylus pens from DTEN. A security vulnerability exists in DTEN D5 and D7 versions prior to 1.3.4. An attacker can exploit the vulnerability to perform system administration and execute arbitrary code to obtain data displayed by Zoom Client...