PT-2020-18367

Name of the Vulnerable Software and Affected Versions PrestaShop module ps facetedsearch versions prior to 3.5.0 Description The issue is related to a reflected XSS with the url name parameter. The problem is fixed in version 3.5.0. Recommendations For PrestaShop module ps facetedsearch versions...

CVE-2019-20523

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

CVE-2019-20523

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

Cross site scripting

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

CVE-2019-20523

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

PT-2020-10499

Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the Name parameter in the "index.php/partner/index" endpoint. Recommendations For ilchCMS version 2.1.23, avoid using the Name parameter in the "index.php/partner/index" endpoint...

CVE-2019-20523: Improper Neutralization of Input During Web Page Generation

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

CVE-2020-8436

XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rmformid, rmtr, or formname parameter...

D-Link DIR-825 and TRENDnet TEW-632BRP Command Injection Vulnerability (CNVD-2020-16100)

The D-Link DIR-825 is an AC 1200 Wi-Fi dual-band Gigabit LAN/WAN router.The TRENDnet TEW-632BRP is a 300Mbps wireless home router. A command injection vulnerability exists in the D-Link DIR-825 and TRENDnet TEW-632BRP. A remote attacker can exploit this vulnerability to execute arbitrary commands...

rConfig Arbitrary OS Command Execution Vulnerability

rConfig is an open source network device configuration management utility . An arbitrary OS command execution vulnerability exists in lib/ajaxHandlers/ajaxAddTemplate.php in rConfig 3.94 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary OS commands via...

CVE-2018-14384

The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting XSS vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter...

PT-2020-8533

Name of the Vulnerable Software and Affected Versions: SEO Panel versions 3.13.0 and earlier Description: The Website Manager module is affected by a stored Cross-Site Scripting XSS issue, allowing remote authenticated attackers to inject arbitrary web script or HTML via the name parameter in the...

CVE-2018-14384: Improper Neutralization of Input During Web Page Generation

The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting XSS vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter...

CVE-2020-9029

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php...

CVE-2020-9032

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to kernlog.php...

CVE-2020-9033

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php...

CVE-2020-9030

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php...

CVE-2020-9029

Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php...

CVE-2012-2452

Multiple cross-site scripting XSS vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter to modules.php or 2 imgurl to includes/wysiwyg/spaw/editor/plugins/imgpopup/imgpopup.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter to modules.php or 2 imgurl to includes/wysiwyg/spaw/editor/plugins/imgpopup/imgpopup.php...