176 matches found
CVE-2024-24130
Mail2World v12 Business Control Center has a reflected XSS in resellercenter/login.asp via the Usr parameter. Root cause: reflected input is echoed into the page. Impact per sources: confidentiality and integrity may be low; no availability impact reported. Exploitation details are not provided i...
PT-2023-8216 · Zyxel · Zyxel Pmg2005-T20B
Name of the Vulnerable Software and Affected Versions: ZyXel PMG2005-T20B firmware version V1.00ABNK.2b11 C0 Description: The issue is related to a buffer overflow vulnerability in the cgi-bin/login.asp component of the ZyXel PMG2005-T20B firmware. This vulnerability can be exploited by a remote...
CVE-2022-35192
D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service DoS via the User parameter or Pwd parameter to Login.asp...
D-Link AC1200 安全漏洞
The D-Link AC1200 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 version, which originates from a vulnerability that could allow an unauthenticated attacker to cause a denial of servic...
CVE-2020-7983
CVE-2020-7983 affects CommScope Ruckus ZoneFlex R500 devices running 3.4.2.0.384. The vulnerability is a CSRF in login.asp that could allow remote attackers to access the administrative panel and potentially perform SSRF attacks. Affected component is the login page (login.asp); root cause detail...
CVE-2018-18775
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product...
CVE-2018-18775
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product...
CVE-2018-18775
The vulnerability CVE-2018-18775 affects Microstrategy Web 7, where Login.asp Msg parameter input is not sufficiently encoded, causing a Cross-Site Scripting (XSS). The NVD entry notes input encoding weaknesses leading to XSS with a base CVSS v3.0 score of 6.1 (Network, Low user interaction requi...
sistemas.anac.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-633902 Description| Value ---|--- Affected Website:| sistemas.anac.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sistemas.anac.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-621168 Description| Value ---|--- Affected Website:| sistemas.anac.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
perfumenani12.com XSS vulnerability
Open Bug Bounty ID: OBB-620194 Description| Value ---|--- Affected Website:| perfumenani12.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
smshettyinstitute.co XSS vulnerability
Vulnerable URL: http://smshettyinstitute.co/international/login.asp?corner=1"...
acthomehealthservices.net XSS vulnerability
Vulnerable URL: https://acthomehealthservices.net/ActApp/Security/Login.asp?silent===/actapp/patients/patients.asp=1"...
eterragroup.com XSS vulnerability
Vulnerable URL: http://www.eterragroup.com/Login.asp?done=%2Fclientes%2Easp%3F=1"...
elska.biz XSS vulnerability
Vulnerable URL: http://elska.biz/members/user-login.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...
CVE-2003-0585
The vulnerability (CVE-2003-0585) affects Brooky eStore 1.0.1–1.0.2b, comprising an SQL injection in login.asp that lets remote attackers bypass authentication and execute arbitrary SQL via the (1) user or (2) pass parameters. No additional exploit or patch details are provided in the supplied do...
Ipswitch WhatsUp Professional Source Disclosure (CVE-2006-2357)
Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to NmConsole/Login.asp...
cmotor.com XSS vulnerability
Vulnerable URL: http://www.cmotor.com/scripts/login.asp?Source=supportsales.asp=email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Keeper IP Camera 3.2.2.10 - Authentication Bypass
Keeper IP Camera 3.2.2.10 - Authentication Bypass Exploit Title: Keeper IP Camera - Authentication Bypass Date: 25/08/2015 Exploit Author: RAT - ThiefKing Vendor Homepage: http://www.keeper.cn/en/Camera-ip.asp Version: 3.2.2.10 WEB Version: 6.1.17.192 Tested on: QB200W, QB130W, QA130W,... Exploit...
