Design/Logic Flaw

Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel which will require a physical reset to restore administrative control via Randomnum=99AC8CEC6E845B28&mode=1 in a POST request to the cgi-bin/setfactory URI...

CVE-2020-29194

CVE-2020-29194 affects Panasonic Security System WV-S2231L (firmware 4.25). A denial-of-service of the admin control panel is possible via a POST to /cgi-bin/set_factory with Randomnum=99AC8CEC6E845B28&mode=1, requiring a physical reset to regain control. Documented impact: admin control panel un...

Panasonic Security System Security Vulnerability

The Panasonic WV-S2231L is a webcam from Panasonic Japan. A security vulnerability exists in the Panasonic Security System WV-S2231L version 4.25, which allows denying service to the administrative control panel via Randomnum=99AC8CEC6E845B28&mode=1 in a POST request with a factory URI set by...

CVE-2020-26766

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

CVE-2020-26766

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

CVE-2020-26766

CVE-2020-26766 affects PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1, involving a Cross Site Request Forgery (CSRF) vulnerability in the loginsystem page. The connected sources consistently describe the issue as CSRF on the loginsystem page, with no further ...

Egavilanmedia User Registration & Login System Cross-Site Request Forgery Vulnerability

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site request forgery vulnerability exists in EgavilanMedia User Registration & Login System with Admin Panel 1.0, which allows to remotely obtain privileges to ...

WonderCMS Cross-Site Scripting Vulnerability

WonderCMS is an open source, fast, small and simple flat file cms. A cross-site scripting vulnerability exists in the "Admin Panel" of WonderCMS 3.1.3. The vulnerability can be exploited to steal cookies via page keywords...

Egavilan Media Under Onstruction Page With Cpanel SQL Injection Vulnerability

Egavilan Media Under Onstruction Page With Cpanel is a software used to show websites under construction organized by Egavilan Media in the United States. An SQL injection vulnerability exists in Egavilan Media Under Onstruction Page With Cpanel, which can be exploited by an attacker to gain acce...

CVE-2020-29474

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution...

CVE-2020-29247

WonderCMS 3.1.3 is affected by cross-site scripting XSS in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload...

CVE-2020-29474

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution...

CVE-2020-29472

EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution...

CVE-2020-29247

WonderCMS 3.1.3 is affected by cross-site scripting XSS in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload...

Sql injection

EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution...

Cross site scripting

WonderCMS 3.1.3 is affected by cross-site scripting XSS in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload...

CVE-2020-29474

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution...

CVE-2020-29474

CVE-2020-29474 affects EGavilan Media EGM Address Book 1.0. A SQL injection vulnerability allows an attacker to gain Admin Panel access and perform remote arbitrary code execution. Publicly available exploits (e.g., Exploit-DB) exist per references in the records.

CVE-2020-29247

WonderCMS 3.1.3 is affected by cross-site scripting XSS in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload...