CVE-2024-40114

The Sitecom WLX-2006 Wall Mount Range Extender N300 is vulnerable to a Cross Site Scripting (XSS) flaw in versions v1.5 and earlier . The root cause is the improper handling of the language cookie , which allows an attacker to manipulate it to inject malicious JavaScript code. As of the current d...

CVE-2024-40112

A Local File Inclusion LFI vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information...

Sitecom WLX-2006 Wall Mount Range Extender N300 安全漏洞

The Sitecom WLX-2006 Wall Mount Range Extender N300 is a wall mount range extender from Sitecom. A security vulnerability exists in the Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and earlier versions, which stems from a mishandling of a language cookie that could result in local file...

Sitecom WLX-2006 Wall Mount Range Extender N300 跨站脚本漏洞

The Sitecom WLX-2006 Wall Mount Range Extender N300 is a wall mount range extender from Sitecom. A security vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and earlier versions, which stems from improper manipulation of a language cookie and could lead to a cross-site...

CVE-2024-40114: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code...

CVE-2024-40112: Improper Control of Filename for Include/Require Statement in PHP Program

A Local File Inclusion LFI vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information...

CVE-2024-40114

A Cross Site Scripting XSS vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code...

PT-2025-23523 · Sitecom · Sitecom Wlx-2006

Name of the Vulnerable Software and Affected Versions: Sitecom WLX-2006 Wall Mount Range Extender N300 versions 1.5 and before Description: A Local File Inclusion LFI issue exists, which allows an attacker to manipulate the language cookie to include arbitrary files from the server. This can be...

CVE-2023-25292

Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...

CVE-2019-13956

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

CVE-2023-41055 LibreY Server-Side Request Forgery (SSRF) vulnerability via wikipedia_language cookie

LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery SSRF vulnerability in the engines/google/text.php and engines/duckduckgo/text.php files in versions before commit...

LibreY Code Issue Vulnerability

LibreY is a fork of LibreX, a frameless and JavaScript-free privacy-respecting metasearch engine by hnhx. A code issue vulnerability exists in LibreY. An attacker could use this vulnerability to request the server to send an HTTP GET request to an arbitrary target and conduct a Denial of Service...

Vade Secure Gateway 跨站脚本漏洞

Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway. An attacker can exploit the vulnerability to execute arbitrary code via the username, password and language cookie parameters...

CVE-2023-29714: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via the username, password, and language cookies parameter...

Intermesh BV Group Office 跨站脚本漏洞

Intermesh BV Group Office is an enterprise CRM and groupware tool from Intermesh BV open source. A security vulnerability exists in Intermesh BV Group Office version 6.6.145. An attacker can exploit the vulnerability to elevate privileges and obtain sensitive information via the GOLANGUAGE cookie...

PT-2023-20015 · Intermesh Bv · Group-Office

Name of the Vulnerable Software and Affected Versions: Intermesh BV Group-Office version 6.6.145 Description: The issue allows attackers to gain escalated privileges and gain sensitive information via the GO LANGUAGE cookie. This is a Reflected Cross Site Scripting XSS issue. Recommendations: For...

Exploit for Cross-site Scripting in Group-Office Group_Office

CVE-2023-25292 Reflected Cross Site Scripting XSS in Interme...

GHSA-P26G-97M4-6Q7C Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies

Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with " double quote, it will continue to read the cookie string unti...

CVE-2022-31489

Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutiolanguage cookie SQL injection...

CVE-2019-13956

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...