CVE-2024-32355

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function...

CVE-2024-32355

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function...

CVE-2024-32355

CVE-2024-32355 affects TOTOLINK X5000R (firmware 9.1.0cu.2350_B20230313). The vulnerability is a command injection via the password parameter in the setSSServer function, enabling arbitrary command execution. Multiple sources describe the flaw and its origin in /cgi-bin/cstecgi.cgi handling; CVSS...

CVE-2024-4822

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session...

CVE-2024-3791

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting XSS through /admin/SystemConfiguration, name / free memory limit fields , type / password parameters. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim an...

CVE-2024-35099

TOTOLINK LR350 V9.3.5u.6698B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

CVE-2024-35099

TOTOLINK LR350 V9.3.5u.6698B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

CVE-2024-34308

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-34308

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode...

TOTOLINK LR350 安全漏洞

TOTOLINK LR350 is a 4G LTE router from China's TOTOLINK , which supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a buffer overflow vulnerability, which arises when the password parameter in the urldecode function fails to correctly...

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R password parameter, which originates from the password parameter of /cgi-bin/cstecgi.cgi failing to properly filter constructed command special characters,...

Web-School ERP 跨站脚本漏洞

Web-School ERP is an application from Web-School India, Inc. An ERP application. A cross-site scripting vulnerability exists in Web-School ERP version 1.0, which stems from a cross-site scripting vulnerability in the username and password parameters of the /index.php page...

CVE-2024-35099

TOTOLINK LR350 V9.3.5u.6698B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

CVE-2024-35099

TOTOLINK LR350 V9.3.5u.6698B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

CVE-2024-35099

TOTOLINK LR350, version 9.3.5u.6698_B20230810, contains a stack overflow in the loginAuth function triggered by the password parameter. Root cause: improper input validation of the password in loginAuth leading to a stack overflow. Impact per sources: potential arbitrary code execution or unautho...

PT-2024-26318 · Totolink · Totolink Lr350

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6698 B20230810 Description: A stack overflow issue was discovered via the password parameter in the loginAuth function. This issue can be exploited, potentially allowing unauthorized access. Recommendations: For...

PT-2024-24532 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found, related to the setSSServer function, specifically via the password parameter. Recommendations: For TOTOLINK X5000R version 9.1.0cu.2350 B20230313...

PT-2024-33031 · Unknown · School Erp Pro+Responsive

Name of the Vulnerable Software and Affected Versions: School ERP Pro+Responsive version 1.0 Description: The issue allows an attacker to partially take control of the victim's browser session through a cross-site scripting XSS attack. This is achieved by exploiting the username and password...

CVE-2024-34308

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-34308

Affected product: TOTOLINK LR350 (v9.3.5u.6369_B20220309). A vulnerability in the urldecode function allows a stack overflow via the password parameter. Public records indicate potential for arbitrary code execution and/or denial of service . Several sources corroborate the stack overflow root ca...