3290 matches found
NETGEAR XR300 安全漏洞
The NETGEAR XR300 is a wireless router from NETGEAR. NETGEAR XR300 version v1.0.3.78 suffers from a command injection vulnerability that stems from the systemname parameter in the wizdyn.cgi component failing to properly filter constructed command special characters, commands, and so on. An...
CVE-2024-10791
A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit...
Code-Projects Content Management System SQL注入漏洞
Code-Projects Content Management System is a Code-Projects open source content and management system. A SQL injection vulnerability exists in Code-Projects Content Management System version 1.0, which originates from a SQL injection of the parameter username...
Codezips Hospital Appointment System 安全漏洞
Codezips Hospital Appointment System is an open source hospital appointment system from Codezips. A security vulnerability exists in Codezips Hospital Appointment System version 1.0, which originates from an SQL injection in the parameter Name...
PT-2024-16550 · Unknown · Codezips Hospital Appointment System
Name of the Vulnerable Software and Affected Versions: Codezips Hospital Appointment System version 1.0 Description: A critical issue has been found in the system, affecting some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The...
CVE-2024-10741
A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has be...
CVE-2024-10700
A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...
CVE-2024-51430
Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...
SourceCodester Online Diagnostic Lab Management System 安全漏洞
SourceCodester Online Diagnostic Lab Management System is an online diagnostic lab management system from SourceCodester open source. A security vulnerability exists in SourceCodester Online Diagnostic Lab Management System version v.1.0. A remote attacker can exploit this vulnerability to execut...
PT-2024-34632 · Unknown · Online Diagnostic Lab Management System Using Php
Name of the Vulnerable Software and Affected Versions: online diagnostic lab management system using php version 1.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It allows a remote attacker to execute arbitrary code via the Test Name parameter on the...
CVE-2024-51430
Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...
CVE-2024-51430
Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...
EnGenius ESR580 安全漏洞
The EnGenius ESR580 is a series of wireless access points from EnGenius. A security vulnerability exists in the EnGenius ESR580 version 1.1.30 and earlier, which stems from a stored cross-site scripting attack that allows remote attackers to conduct a stored cross-site scripting attack via the...
PT-2024-8390 · NetGear · Netgear R8500
Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to a command injection vulnerability in the share name parameter at the "usb remote smb conf.cgi" endpoint. This vulnerability allows attackers to execute arbitrary OS commands...
PT-2024-8535 · NetGear · Netgear Xr300
Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a command injection vulnerability in the system name parameter at the "wiz dyn.cgi" endpoint. This vulnerability can be exploited by sending a specially crafted request,...
PT-2024-9032 · D Link · D-Link Dir-823G
Name of the Vulnerable Software and Affected Versions: D-Link DIR 823G version 1.0.2B05 Description: The issue is related to a command injection vulnerability via the HostName parameter in the SetWanSettings function. This allows attackers to execute arbitrary OS commands via a crafted request. T...
PHPGurukul Vehicle Record System 跨站脚本漏洞
PHPGurukul Vehicle Record System is a vehicle record management system from PHPGurukul. A cross-site scripting vulnerability exists in PHPGurukul Vehicle Record System version 1.0, which originates from a cross-site scripting vulnerability in the Brand Name parameter of the /admin/edit-brand.php...
The vulnerability in the `usb_remote_smb_conf.cgi` script of NETGEAR XR1000 Wi-Fi routers allows a hacker to execute arbitrary commands.
The vulnerability in the usbremotesmbconf.cgi script of NETGEAR XR1000 Wi-Fi routers lies in the lack of measures for sanitizing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the sharename parameter...