PT-2024-38386 · Unknown · Airline Reservation System

Name of the Vulnerable Software and Affected Versions: Airline Reservation System version 1.0 Description: A critical issue has been found in the Airline Reservation System, affecting the /index.php file. The manipulation of the page argument leads to file inclusion. This issue can be exploited...

itsourcecode Airline Reservation System 安全漏洞

itsourcecode Airline Reservation System is an airline reservation system from itsourcecode, Inc. A security vulnerability exists in version 1.0 of itsourcecode Airline Reservation System, which stems from an incorrect manipulation of the parameter page can lead to file inclusion...

PT-2024-7661 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is caused by a stack overflow via the page parameter in the fromSafeClientFilter function, allowing attackers to cause a Denial of Service DoS via a crafted POST request to the affected...

The vulnerability of Brother HL-L2360D, DCP-1610W, DCP-L2550DW, HL-L2390DW, HL-L2395DW, MFC-J4620DW, MFC-J6945DW, MFC-L2710DN, MFC-L2710DW, MFC-L2770DW, MFC-L8690CDW, TD-2130N printers’ microprogramming software allows a hacker to redirect users to any desired URL address.

The vulnerability of Brother HL-L2360D, DCP-1610W, DCP-L2550DW, HL-L2390DW, HL-L2395DW, MFC-J4620DW, MFC-J6945DW, MFC-L2710DN, MFC-L2710DW, MFC-L2770DW, MFC-L8690CDW, and TD-2130N printers relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious...

Bolt CMS 跨站脚本漏洞

Bolt CMS is Bolt CMS open source PHP-based open source content management system . A cross-site scripting vulnerability exists in Bolt CMS version 3.7.1, which stems from the parameter body in the file /preview/page can lead to cross-site scripting. No detailed vulnerability details are currently...

CVE-2024-37859

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...

PT-2024-37219 · WordPress · Ultimate Classified Listings

Name of the Vulnerable Software and Affected Versions: The Ultimate Classified Listings WordPress plugin versions prior to 1.3 Description: The issue allows unauthenticated users to access PHP files on the server from the listings page due to a lack of validation for the ucl page and layout...

PT-2024-29410 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A stack-based buffer overflow issue was found via the page parameter at the "/ip/goform/DhcpListClient" API endpoint. Recommendations: For Tenda FH1201 version 1.2.0.14, avoid using the page paramete...

Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from a page parameter on ip/goform/DhcpListClient that contains a stack-based buffer overflow vulnerability. No detailed vulnerability details are provided at this...

PT-2024-29414 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A stack-based buffer overflow issue was found via the page parameter at the "/ip/goform/NatStaticSetting" API endpoint. Recommendations: For Tenda FH1201 version 1.2.0.14, avoid using the page...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the pagination feature used in searches and filters by injecting a malformed URL into the GET parameter perpage Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the pagination feature used in searches and filters by injecting a malformed URL into the GET parameter perpage Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker...

CVE-2024-39210

Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows attackers to read arbitrary PHP files and access other sensitive information within the application...

PT-2024-28391 · Unknown · Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: Best House Rental Management System version 1.0 Description: The issue allows attackers to read arbitrary PHP files and access other sensitive information within the application through the Page parameter at "index.php". This is an arbitrary...

CVE-2024-39210

CVE-2024-39210 applies to Best House Rental Management System v1.0. The vulnerability is an arbitrary file read via the Page parameter in index.php, allowing an attacker to read arbitrary PHP files and access other sensitive information within the application. Exploitability details across source...

Parsec Automation TrakSYS Security Vulnerability

Parsec Automation TrakSYS is an MES solution from Parsec Automation, USA. A security vulnerability exists in Parsec Automation TrakSYS version 11.x.x, which stems from the parameter ID of the file TS/export/contentpage leading to a direct request...

Hangzhou Meisoft Information Technology FineSoft Cross-Site Scripting Vulnerability

Hangzhou Meisoft Information Technology Finesoft is a pharmaceutical management software from Hangzhou Meisoft Information China. A cross-site scripting vulnerability exists in Hangzhou Meisoft Information Technology FineSoft v.8.0 and earlier versions, which can be exploited to allow a remote...

CVE-2024-37671

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter...

CVE-2024-37671

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter...

CVE-2024-37671

CVE-2024-37671 affects Tessi Docubase Document Management 5.x. A Cross Site Scripting (XSS) flaw exists in the page parameter that could allow a remote attacker to execute arbitrary code. This is documented in multiple sources (NVD/Red Hat/CNNVD/CVE listings), but the connected EU/NVD/RH/CNNVD en...