1196 matches found
Command injection
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function...
TOTOLINK A7100RU 操作系统命令注入漏洞
The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOlink A7100RU V7.4cu.2313B20191024 version, which stems from a command injection issue contained in the password parameter of the...
PT-2023-15585 · Totolink · Totolink A7100Ru
Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version 7.4cu.2313 B20191024 Description: A command injection issue was discovered via the password parameter in the setting/setOpenVpnCertGenerationCfg function. This allows for potential exploitation. Recommendations: For...
CVE-2022-48125
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function...
CVE-2022-48125
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function...
PT-2023-12323 · Reprise · Reprise License Manager
Name of the Vulnerable Software and Affected Versions: Reprise License Manager RLM versions through 14.2BL4 Description: The issue concerns a CRLF vulnerability in the Reprise License Manager RLM web interface. This vulnerability is located in the password parameter of the View License Result...
CVE-2022-48125
CVE-2022-48125 affects the Totolink A7100RU (V7.4cu.2313_B20191024). A command injection vulnerability exists in the password parameter used by the function setting/setOpenVpnCertGenerationCfg. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, low attack c...
CVE-2022-48125: Improper Neutralization of Special Elements used in an OS Command
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function...
CVE-2021-37499: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CRLF vulnerability in Reprise License Manager RLM web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers...
web-cyradm SQL注入漏洞
web-cyradm is web-cyradm open source a web-based software. web-cyradm has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter login/loginpassword/LANG leads to sql injection...
EPrints User Group ulcc-core 命令注入漏洞
ulcc-core is an open source repository from EPrints User Group. EPrints User Group ulcc-core suffers from a command injection vulnerability that stems from an unknown function in its cgi/toolbox/toolbox file that operates on the parameter password allowing an attacker to implement command injecti...
The vulnerability of the RSA KeyPassWD parameter in the web interface for managing Hirschmann BAT-C2 WLAN-client microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the RSA KeyPassWD parameter in the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a...
Bank Management System SQL注入漏洞
Bank Management System is a bank management system. A SQL injection vulnerability exists in Blood Bank Management System version 1.0, which stems from several unknown handlers in the login.php file that manipulate the parameters username/password allowing an attacker to implement SQL injection. N...
PT-2022-28051 · Sourcecodester · Sourcecodester Loan Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Blood Bank Management System version 1.0 Description: A critical issue affects the processing of the file login.php, where the manipulation of the username and password arguments leads to SQL injection. The attack can be...
CVE-2022-46561
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module...
CVE-2022-46570
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan3Settings module...
CVE-2022-46566
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module...
CVE-2022-46563
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module...
