phpIPAM cross-site scripting vulnerability (CNVD-2018-09472)

phpIPAM is a set of open source PHP and MySQL based IP address management application IPAM. A cross-site scripting vulnerability exists in the app/sections/user-menu.php file in versions prior to phpIPAM 1.3.1. A remote attacker can exploit this vulnerability to inject arbitrary code or denial of...

CVE-2017-15640

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

CVE-2017-15640: Improper Neutralization of Input During Web Page Generation

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ip parameter...

CVE-2014-6604

Cross-site scripting XSS vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ip parameter...

CVE-2014-6604: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ip parameter...

PT-2018-4288

Name of the Vulnerable Software and Affected Versions Subscribe2 plugin versions prior to 10.16 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the ip parameter. This can be exploited by attackers to execute malicious scripts on the...

PT-2017-14482

Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations. Although authentication is required to exploit this issue,...

CVE-2013-6924: Improper Neutralization of Special Elements used in a Command

Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php...

Netsweeper Authentication Bypass Vulnerability

Netsweeper is a Web content filtering solution from Netsweeper Canada. A security vulnerability exists in Netsweeper versions prior to 3.1.10, 4.0.x prior to 4.0.9 and 4.1.x prior to 4.1.2. A remote attacker can exploit this vulnerability by sending the 'ip' parameter to the...

PT-2017-6371

Name of the Vulnerable Software and Affected Versions Netsweeper versions prior to 3.1.10 Netsweeper versions 4.0.x prior to 4.0.9 Netsweeper versions 4.1.x prior to 4.1.2 Description The issue allows remote attackers to bypass authentication and remove IP addresses from the quarantine. This is...

CVE-2014-9610: Undefined Security Weakness

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresses from the quarantine via the ip parameter to webadmin/user/quarantinedisable.php...

Command Execution Vulnerability in the ip Parameter of Kirin Fortress

Kirin Fortress is the open source operations and maintenance fortress. A command execution vulnerability exists in the ip parameter of the KyLinBarrier. Due to the lack of filtering of the parameter, an attacker can utilize the ip parameter to execute arbitrary commands...

PT-2017-4255

Name of the Vulnerable Software and Affected Versions Zyxel EMG2926 version V1.00AAQT.4b8 Description A command injection issue was discovered in the diagnostic tools of the Zyxel EMG2926 home router, specifically in the nslookup function. This allows a malicious user to execute arbitrary command...

PT-2018-5958

Name of the Vulnerable Software and Affected Versions: phpIPAM versions prior to 1.3.1 Description: The issue concerns an XSS vulnerability via the ip parameter in the app/sections/user-menu.php file. Recommendations: For versions prior to 1.3.1, update to version 1.3.1 or later to resolve the...

Server Side Request Forgery (SSRF) Vulnerability in AVTECH DVRs

AVTECH, founded in 1996, is one of the world's leading CCTV manufacturers. The main products are surveillance equipment, network cameras, network video recorders and so on. AVTECH DVR suffers from a server-side request forgery SSRF vulnerability. search.cgi provides search and access services for...

Cross site scripting

Cross-site scripting XSS vulnerability in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to script/statistics/getconn.php...

CVE-2016-4969: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to script/statistics/getconn.php...

PT-2016-6201

Name of the Vulnerable Software and Affected Versions Fortinet FortiWan versions prior to 4.2.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the IP parameter to the "script/statistics/getconn.php" endpoint. Recommendations For...

Fortinet FortiWAN Cross-Site Scripting Vulnerability

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. A cross-site scripting vulnerability exists in the IP parameter of the /script/statistics/getconn.php page in Fortinet FortiWAN. An attacker could exploit this vulnerability to execute arbitrary web script or HTML...