101 matches found
WordPress Check Pincode For Woocommerce plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Check Pincode For Woocommerce versions = 1.1...
The vulnerability of the apcli_wps_gen_pincode function in the TOTOLINK A6000R router’s microprogramming system allows a hacker to execute arbitrary commands.
The vulnerability of the apcliwpsgenpincode function in the TOTOLINK A6000R router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in the command when processing the ifname parameter. Exploiting this vulnerability allows a remote attacker to...
CVE-2024-9080
A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2024-9080 code-projects Student Record System pincode-verification.php sql injection
A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2024-9080: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...
Code-Projects Student Record System SQL注入漏洞
Code-Projects Student Record System is a Code-Projects open source student record system. Code-Projects Student Record System version 1.0 has a SQL injection vulnerability that originates from SQL injection of the pincode parameter in the /pincode-verification.php file...
PT-2024-39414 · Unknown · Code-Projects Student Record System
Name of the Vulnerable Software and Affected Versions: code-projects Student Record System version 1.0 Description: A critical issue was found in the code-projects Student Record System. The problem is with an unknown function of the file /pincode-verification.php. The manipulation of the pincode...
TOTOLINK A6000R 安全漏洞
TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a command injection vulnerability that stems from the ifname parameter in the apcliwpsgenpincode function containing a command injection vulnerability. No details of the vulnerability are...
PT-2024-8098 · Totolink · Totolink X6000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: The issue is related to the apcli wps gen pincode function in the TOTOLINK A6000R router's firmware, which fails to neutralize special elements used in a command when processing the...
CVE-2024-5066
A vulnerability classified as critical was found in PHPGurukul Online Course Registration System 3.1. Affected by this vulnerability is an unknown functionality of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched...
Online Course Registration SQL注入漏洞
PHPGurukul Online Course Registration is a PHP and MySQL based online course registration system from PHPGurukul, Inc. A SQL injection vulnerability exists in version 3.1 of the PHPGurukul Online Course Registration System, which stems from the parameter pincode in the file...
CVE-2024-5066: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in PHPGurukul Online Course Registration System 3.1. Affected by this vulnerability is an unknown functionality of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched...
Linksys E5600 Command Injection Vulnerability
Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys USA. A command injection vulnerability exists in the Linksys E5600 v1.1.0.26, which stems from the failure of the PinCode parameter of the /API/info form endpoint to properly filter constructed command special characters...
The vulnerability of the /API/info component of the Linksys E5600 router’s microprogramming software allows a hacker to inject arbitrary commands.
The vulnerability of the /API/info component of the Linksys E5600 router’s microprogramming system lies in the lack of measures taken to neutralize special elements used in the OS commands. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands using the PinCode...
CVE-2024-33788
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint...
CVE-2024-33788
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint...
CVE-2024-33788
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint...
CVE-2024-33788: Improper Neutralization of Special Elements used in a Command
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint...
Linksys E5600 安全漏洞
Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys USA. A command injection vulnerability exists in the Linksys E5600 v1.1.0.26, which stems from the failure of the PinCode parameter of the /API/info form endpoint to properly filter constructed command special characters...
