369 matches found
CVE-2024-31551
CVE-2024-31551 : A directory traversal in cmseasy v7.7.7.9 20240105 (lib/admin/image.admin.php) allows attackers to delete arbitrary files via a crafted GET request. Affected product: Cmseasy. CVSS v3.1 base score 7.5 (Network, Privileges: None, User interaction: None, Confidentiality: None, Inte...
The vulnerability of the CGI script nas_sharing.cgi of the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L NAS devices allows a hacker to execute arbitrary code.
The vulnerability of the CGI script nassharing.cgi of the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L device operating systems is related to the use of pre-installed user accounts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted...
CVE-2024-28734
Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted GET request using the cols parameter...
CVE-2024-28734
Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted GET request using the cols parameter...
CVE-2024-28734
Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted GET request using the cols parameter...
Sql injection
SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...
Cross site scripting
Cross Site Scripting XSS vulnerability in sourcecodester Simple Student Attendance System v1.0 allows attackers to execute arbitrary code via crafted GET request to web application URL...
Simple Student Attendance System Security Vulnerability
Simple Student Attendance System is a simple student attendance system. A security vulnerability exists in Simple Student Attendance System v1.0, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary code via a crafted GET request...
CVE-2024-22543
An issue was discovered in Linksys Router E1700 1.0.04 build 3, allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/ URI or via the ExportSettings function...
CVE-2024-23763
SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET request using modifiersattribute parameter...
CVE-2024-24495
SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...
CVE-2024-24495
SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...
Sql injection
SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request...
Daily Habit Tracker SQL Injection Vulnerability
Daily Habit Tracker is a daily habit tracker by rems personal developer. Daily Habit Tracker version v.1.0 suffers from a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that allows remote attackers to execute arbitrary code via a crafted GET request...
The vulnerability of the devinfo interface in D-Link’s microprogrammed router software allows a intruder to gain unauthorized access to protected information.
The vulnerability of the devinfo interface in D-Link’s microprogrammed router software is related to insufficient protection of operational data during the processing of the area parameter. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information by...
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
kodbox security breach
kodbox is a network file manager. A security vulnerability exists in kodbox version v1.43, which stems from a vulnerability that allows an attacker to arbitrarily add administrator accounts via a crafted GET request...