Chikista Patient Management Software 跨站脚本漏洞

Chikista Patient Management Software is a hospital/clinic management system from Chikista India. Chikista Patient Management Software 2.0.2 has a security vulnerability in the firstname parameter of the 1 Patient/Insertion, 2 Patient Report, 3 Appointment Report, 4 Visit Report, and 5 Billing...

Chikista Patient Management Software 跨站脚本漏洞

Chikista Patient Management Software is a hospital/clinic management system from Chikista India. A security vulnerability exists in Chikista Patient Management Software 2.0.2, which stems from a cross-site scripting via the lastname parameter in 1 patient/insert, 2 patientreport, 3...

ResearchGate Automatic Question Paper Generator System 跨站脚本漏洞

ResearchGate Automatic Question Paper Generator System 1.0 is an automatic question paper generation system from ResearchGate, a German company. A cross-site scripting vulnerability exists in the account page component /aqpg/users/login.php, where the last name parameter lacks a validation filter...

PT-2022-2561

Name of the Vulnerable Software and Affected Versions D-Link DIR-820L version 1.05B03 Description The issue is related to a remote command execution vulnerability. It can be exploited via HTTP POST to get set ccp, allowing a remote attacker to execute arbitrary commands through the Device Name...

CVE-2021-26622

An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...

CVE-2021-26622

Consolidated details from multiple sources confirm CVE-2021-26622 affects Genian NAC. The vulnerability stems from a Server-Side Template Injection (SSTI) and insufficient validation of the file name parameter, enabling remote attackers to execute arbitrary code with SYSTEM privileges on all conn...

CVE-2021-26622 Genian NAC remote code execution vulnerability

An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...

CVE-2021-33961

A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...

CVE-2021-33961

A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...

Cross site scripting

A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...

CVE-2021-33961

A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...

enhanced-github跨站脚本漏洞

enhanced-github is a browser extension that adds useful functionality to the GitHub website by Varun Malhotra, an individual developer in India. A security vulnerability exists in enhanced-github version 5.0.11, which stems from a cross-site scripting XSS vulnerability in the file name parameter ...

CVE-2021-45787

There is a stored Cross Site Scripting XSS vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks...

Cross-Site Scripting (XSS)

pimcore/pimcore is vulnerable to stored cross-site scripting. The vulnerability exists in the parameter Name when saving Grid Options because a content security policy is not handled properly which allows a malicious attacker to inject and execute arbitrary javascript...

CVE-2022-27005

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-26211

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the...

PT-2022-17724 · Totolink · Totolink A810R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

Pimcore 跨站脚本漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications. pimcore 10.4.0 before the version there is ...

ARRIS TR3300 命令注入漏洞

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the hostname parameter in the dhcp function to properly filter the construct command special characters, commands, etc. An attacker could use this...

PT-2022-17726 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...