1002 matches found
The vulnerability of the `version_upgrade.asp` implementation in the D-Link DI-7200G V2.E1 microprogramming router software allows a hacker to execute arbitrary commands.
The vulnerability of the versionupgrade.asp implementation in the D-Link DI-7200G V2.E1 microprogramming router software is related to insufficient cleaning of input data during the processing of the path parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
CVE-2022-23378
A Cross-Site Scripting XSS vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/allergens/edit/1 is vulnerable...
TastyIgniter 跨站脚本漏洞
TastyIgniter is a free and open source online ordering software based on the Laravel PHP Framework designed for developers and restaurateurs to enjoy life. A cross-site scripting vulnerability exists in TastyIgniter that stems from a cross-site scripting XSS vulnerability in version 3.2.2 of...
CVE-2021-46232
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function versionupgrade.asp. This vulnerability allows attackers to execute arbitrary commands via the path parameter...
CVE-2021-46230
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgradefilter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters...
CVE-2021-46230
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgradefilter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters...
CVE-2021-46232
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function versionupgrade.asp. This vulnerability allows attackers to execute arbitrary commands via the path parameter...
CVE-2021-46230
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgradefilter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters...
CVE-2021-46232
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function versionupgrade.asp. This vulnerability allows attackers to execute arbitrary commands via the path parameter...
CVE-2021-46230: Improper Neutralization of Special Elements used in a Command
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgradefilter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters...
D-Link Di-7200G 命令注入漏洞
D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200G V2.E1 v21.04.09E1 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the path parameter...
CVE-2021-46232: Improper Neutralization of Special Elements used in a Command
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function versionupgrade.asp. This vulnerability allows attackers to execute arbitrary commands via the path parameter...
D-Link Di-7200G 命令注入漏洞
D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200GV2.E1 v21.04.09E1 is vulnerable to a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via path and time parameters...
CVE-2022-24265
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menufilter=3 parameter...
CVE-2022-24265
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menufilter=3 parameter...
CVE-2021-46204
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\include\Model\Article.php...
CVE-2021-46204
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\include\Model\Article.php...
CVE-2021-46203
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter...