63 matches found
RaspAP Code Injection Vulnerability
RaspAP is application software for simple wireless AP setup and management of Debian-based devices. RaspAP raspap-webgui version 3.0.9 suffers from a code injection vulnerability that stems from the parameter country in the file include/provider.php that can lead to code injection...
PT-2023-15864 · Sciencelogic · Sciencelogic Sl1
Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the vendor country parameter of the "vendor print report" feature. This feature takes unsanitized user-controlled input and passes it directly to a...
GZ Scripts Ticket Booking Script 跨站脚本漏洞
GZ Scripts Ticket Booking Script is a ticket booking system from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts Ticket Booking Script version 1.8, which stems from cross-site scripting due to incorrect manipulation of the parameters firstname, secondname, phone, address1, a...
CVE-2023-24276
TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules...
TOTOLINK A7100RU 命令注入漏洞
The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A7100RU V7.4cu.2313B20191024 version, which was discovered to contain a command injection vulnerability via the country parameter of setting/delStaticDhcpRules...
CVE-2023-24276: Improper Neutralization of Special Elements used in a Command
TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules...
Webapplication-Veganguide 跨站脚本漏洞
Webapplication-Veganguide is a vegetarian restaurant guide for individual developers. Webapplication-Veganguide suffers from a cross-site scripting vulnerability that stems from the fact that incorrect manipulation of the parameters country/city can lead to cross-site scripting...
PT-2022-22465 · Sourcecodester · Sourcecodester Human Resource Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: A vulnerability was found in the Master List component, where the manipulation of the city, state, country, or position argument leads to cross-site scripting. This issu...
Human Resource Management System 跨站脚本漏洞
Human Resource Management System is a human resource management system by maverickosama Personal Developer. A cross-site scripting vulnerability exists in Human Resource Management System version 1.0, which is caused by incorrect manipulation of the parameters city/state/country/position...
CVE-2018-20827
The activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the country parameter...
CVE-2018-20827: Improper Neutralization of Input During Web Page Generation
The activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the country parameter...
CVE-2019-13488
A cross-site scripting XSS vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend method is used...
CVE-2018-17840
SQL injection exists in Scriptzee Education Website 1.0 via the collegelist.html subject, city, or country parameter...
Sql injection
SQL injection exists in Scriptzee Education Website 1.0 via the collegelist.html subject, city, or country parameter...
CVE-2018-17840
SQL injection exists in Scriptzee Education Website 1.0 via the collegelist.html subject, city, or country parameter...
PrestaShop cross-site scripting vulnerability (CNVD-2019-16479)
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the 'shopcountry' parameter of the...
XSS in the activity stream gadget via the country parameter - CVE-2018-20827
The activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the country parameter...
CVE-2018-7315
SQL Injection exists in the Ek Rishta 2.9 component for Joomla! via the gender, age1, age2, religion, mothertounge, caste, or country parameter...
CVE-2017-17713
Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the...