CVE-2025-4699

A vulnerability classified as critical was found in PHPGurukul Apartment Visitors Management System 1.0. This vulnerability affects unknown code of the file /admin/visitors-form.php. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploi...

Online Birth Certificate System /user/certificate-form.php file cross-site scripting vulnerability

Online Birth Certificate System is an online birth certificate system. Online Birth Certificate System suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in /user/certificate-form.php, which can be exploited by...

PT-2025-4841 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: Librenms versions prior to 24.11.0 Description: The issue is related to a stored XSS vulnerability in the parameter: /ajax form.php - param: descr. This allows remote attackers to inject malicious scripts, which execute immediately when a use...

CVE-2024-55059

A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php...

TOTOLINK LR350 安全漏洞

TOTOLINK LR350 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK LR350 suffers from an authorization issue vulnerability that stems from an input value of 1 for the parameter authCode in /formLoginAuth.htm, which can lead to authorization bypass. No detailed vulnerability...

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability caused by a failure to properly bounds check the SetAPWifiorLedInfoById interface on /goform/aspForm. An authenticated, remote attacker could exploit this...

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the UpdateWanParams interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer...

CVE-2023-29917

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm...

The vulnerability of the BARS.Web-Swods platform arises from insufficient validation of input data, allowing attackers to execute unauthorized SQL queries against the database of the information system.

The vulnerability of the BARS.Web-Swods platform arises from insufficient validation of input data when accessing the form located at the address /Forms/Open?metaName=. Exploitation of this vulnerability allows a malicious actor to execute unauthorized SQL queries against the database of the...

UBUNTU-CVE-2019-16392

SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...

TOTOLINK Router Models Backdoor Vulnerability

TOTOLINK manufactures routers, wireless access points and networking equipment. A backdoor vulnerability exists in TOTOLINK Router Models. An attacker can bypass the authentication system by using a hidden /boafrm/formSysCmd form and use a remote code execution in the HTTP remote management...