CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

CVE-2021-41426

CVE-2021-41426 affects Beeline Smart Box 2.0.38, with a CSRF vulnerability exposed via the mgt_end_user.htm page. The CVE entry is supported by multiple sources (NVD, Red Hat, CVE List, etc.). The issue is described as vulnerable to CSRF, but the connected documents do not provide explicit exploi...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to a Cross Site Scripting (XSS) flaw in the setup.cgi endpoint, exploitable via the choose_mac parameter. The issue is documented under CVE-2021-41427. Affected component: the web interface handling setup.cgi; vulnerability type: XSS. Impact details in the p...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...

PT-2021-23295

Name of the Vulnerable Software and Affected Versions Beeline Smart Box version 2.0.38 Description The issue is related to Cross Site Scripting XSS via the choose mac parameter to the "setup.cgi" endpoint. This allows for potential malicious script execution. No information is provided about the...

PT-2021-23294

Name of the Vulnerable Software and Affected Versions Beeline Smart box version 2.0.38 Description The issue is related to Cross Site Request Forgery CSRF via the "mgt end user.htm" page. This means an attacker could potentially trick a user into performing unintended actions on the Beeline Smart...

Beeline Smart Box 跨站请求伪造漏洞

Beeline Smart Box is a wireless router from the Russian company Beeline. A security vulnerability exists in Beeline Smart box 2.0.38, which stems from mgtenduser.htm being susceptible to cross-site request forgery CSRF attacks...

Beeline Smart Box 跨站脚本漏洞

Beeline Smart Box is a wireless router from the Russian company Beeline. A security vulnerability exists in Beeline Smart box 2.0.38, which stems from the choosemac parameter of setup.cgi and is susceptible to cross-site scripting XSS attacks...

CVE-2021-41427: Improper Neutralization of Input During Web Page Generation

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...

CVE-2021-41426: Cross-Site Request Forgery (CSRF)

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

SQL Injection

kylin-server-base is vulnerable to SQL injection. SQL statements are concatenated and executed in the CLI or beeline when building new segments, allowing an attacker to inject and execute arbitrary SQL statements if system configurations are overwritten via rest APIs...

Sql injection

Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0...

CVE-2020-13926

Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0...

PT-2020-13785

Name of the Vulnerable Software and Affected Versions Apache Kylin versions 2.0 through 3.0 Description The issue allows for SQL injection attacks due to the concatenation and execution of Hive SQL in Hive CLI or beeline when building a new segment. Some parts of the HQL are from system...

CVE-2020-13926: Improper Neutralization of Special Elements used in an SQL Command

Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0...

Beeline Smart Box Operating System Command Injection Vulnerability

The Beeline Smart Box is a wireless router from the Russian company Beeline. A security vulnerability exists in Beeline Smart Box version 2.0.38. An attacker can exploit this vulnerability via the 'Ping pingipaddr', 'Nslookup nslookupipaddr' or 'Traceroute tracerouteipaddr' parameters to execute...

CVE-2020-12246

Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...

CVE-2020-12246

Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...

Command injection

Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...