158 matches found
CVE-2022-3465 Mediabridge Medialink index.asp improper authentication
A vulnerability classified as critical was found in Mediabridge Medialink. This vulnerability affects unknown code of the file /index.asp. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The...
CVE-2022-3465
The CVE-2022-3465 entry concerns Mediabridge Medialink devices with an improper authentication flaw in unknown code of /index.asp. The vulnerability can be exploited remotely and has publicly disclosed exploits; documents do not specify affected models/firmware versions or a fix. Some sources rei...
CVE-2022-3465: Improper Authentication
A vulnerability classified as critical was found in Mediabridge Medialink. This vulnerability affects unknown code of the file /index.asp. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The...
Design/Logic Flaw
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...
CVE-2020-8033
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...
CVE-2020-8033
CVE-2020-8033 affects CommScope/Ruckus ZoneFlex R500 devices running firmware 3.4.2.0.384. The vulnerability is a Cross-Site Scripting (XSS) issue in the web UI, exploitable via the index.asp Device Name field. The connected documents do not provide detailed exploit steps, impact scope, or remedi...
CVE-2020-8033: Improper Neutralization of Input During Web Page Generation
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...
PT-2020-19930
Name of the Vulnerable Software and Affected Versions Ruckus R500 version 3.4.2.0.384 Description The issue allows for cross-site scripting XSS attacks via the Device Name field in the index.asp page. Recommendations For Ruckus R500 version 3.4.2.0.384, avoid using the Device Name field in the...
CVE-2019-15656
D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of usernamev and passwordv variables...
CVE-2019-15656: Exposure of Sensitive Information to an Unauthorized Actor
D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of usernamev and passwordv variables...
yukselen-muhendislik.com XSS vulnerability
Open Bug Bounty ID: OBB-548024 Description| Value ---|--- Affected Website:| yukselen-muhendislik.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
cgvcinemas.com XSS vulnerability
Open Bug Bounty ID: OBB-254271 Description| Value ---|--- Affected Website:| cgvcinemas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
rmsysinc.com XSS vulnerability
Vulnerable URL: https://rmsysinc.com/index.asp?errMsg=1/-///'/"//--...
PT-2017-17127
Name of the Vulnerable Software and Affected Versions SanaCMS version 7.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the txtFrom parameter in the "/sanadata/seo/index.asp" API endpoint. Recommendations For version 7.3,...
CVE-2017-6518: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter...
disal.com.br XSS vulnerability
Vulnerable URL: https://www.disal.com.br/busca/index.asp?TipoLoja="...
CVE-2017-5882
Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2017-5882
SANADATA SanaCMS 7.3 has an XSS vulnerability in index.asp exploitable via the search parameter. The root cause is reflected script execution from user-supplied input, enabling remote attackers to inject arbitrary web script or HTML. The connected documents confirm the affected product/version an...
CVE-2017-5882: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
PT-2017-16734
Name of the Vulnerable Software and Affected Versions SanaCMS version 7.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the search parameter in the index.asp file. Recommendations For version 7.3, update...