CVE-2025-3671 WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 67.7.0 via the 'page' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrar...

CVE-2025-3671

CVE-2025-3671 concerns the WPGYM WordPress plugin (Gym Management System) with a Local File Inclusion vulnerability exploitable via the vulnerable parameter “page.” According to the primary sources, this affects all versions up to 67.7.0 and requires authentication at Subscriber level or higher; ...

PT-2025-33521 · WordPress · Wpgym - Wordpress Gym Management System

Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin versions prior to 67.7.1 Description: The WPGYM - Wordpress Gym Management System plugin for WordPress is susceptible to Local File Inclusion via the page parameter. This allows authenticated...

The vulnerability of the frmL7ProtForm() function in the HTTP POST Request Handler component of the Tenda FH451 router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the frmL7ProtForm function in the HTTP POST Request Handler component of the Tenda FH451 microprogramming router software is related to buffer overflows in the stack when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary...

Tenda FH451 formSafeClientFilter Function Buffer Overflow Vulnerability

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability that originates from the parameter Go/page in file /goform/SafeClientFilter that fails to properly validate the length of the input data, which can be exploited...

The vulnerability of the fromP2pListFilter() function in the software for Tenda FH451 routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromP2pListFilter function in the Tenda FH451 router’s software lies in the fact that the operation exceeds the buffer limits in memory when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

The vulnerability of the formSafeEmailFilter() function in the microprogramming software for Tenda FH451 allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formSafeEmailFilter function in the Tenda FH451 router software lies in the issue of the operation being executed outside the buffer in memory when processing the page parameter. Exploiting this vulnerability can allow a malicious actor to cause service failures or execut...

The vulnerability of the fromSetIpBind() function in the /goform/SetIpBind library of the Tenda FH451 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpBind function in the /goform/SetIpBind microprogramming system for Tenda FH451 routers is related to buffer overflows when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability that originates from a failure to properly validate the length of the input data for the parameter page in the file /goform/SafeEmailFilter, which can be...

WordPress plugin School Management System for Wordpress 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exis...

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability that originates from a failure to properly validate the length of input data for the parameter Go/page in the file /goform/SafeUrlFilter, which could be exploit...

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability that originates from the parameter Go/page in file /goform/SafeClientFilter that fails to properly validate the length of the input data, which can be exploited...

The vulnerability of the formSafeEmailFilter() function (/goform/SafeEmailFilter) in the Tenda FH1201 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSafeEmailFilter function /goform/SafeEmailFilter of the Tenda FH1201 router software lies in the issue of the operation being executed outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the fromNatlimit() function (/goform/Natlimit) in the Tenda FH451 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromNatlimit function /goform/Natlimit in the Tenda FH451 router’s microprogramming software is related to the operation that goes beyond the buffer boundaries in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the fromSafeUrlFilter() function (/goform/fromSafeUrlFilter) in the Tenda FH1201 router software allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeUrlFilter function /goform/fromSafeUrlFilter in the Tenda FH1201 router software is related to the operation that goes beyond the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...

CVE-2025-50528

A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 =V15.03.05.19 via the page parameter...

CVE-2025-50528

A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 =V15.03.05.19 via the page parameter...

CVE-2025-50528

The CVE-2025-50528 issue affects Tenda AC6 routers, specifically versions up to V15.03.05.19. The vulnerability is a buffer overflow in the fromNatStaticSetting function triggered via the page parameter, leading to potential remote code execution or denial of service as described in multiple sour...

CVE-2025-40729

Reflected Cross-Site Scripting XSS in /customersupport/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter...

Marwal Infotech CMS 注入漏洞

Marwal Infotech CMS is a content management system from Marwal Infotech. An injection vulnerability exists in Marwal Infotech CMS version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /page.php...