Cross site request forgery (csrf)

Discourse 2.3.2 sends the CSRF token in the query string...

CVE-2019-15515

Discourse 2.3.2 sends the CSRF token in the query string...

PT-2019-14237

Name of the Vulnerable Software and Affected Versions Discourse version 2.3.2 Description The issue involves Discourse sending the CSRF token in the query string, which could potentially be exploited. Recommendations For Discourse version 2.3.2, consider updating to a newer version that does not...

CVE-2019-15515: Cross-Site Request Forgery (CSRF)

Discourse 2.3.2 sends the CSRF token in the query string...

python: CRLF injection via the query part of the url passed to urlopen()

An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the query string after a ? charact...

Cross-site Scripting (XSS)

grumpydictator/firefly-iii is vulnerable to cross-site scripting XSS attacks. The attack is due to lack of sanitization of query string provided by the user in the search query, allowing an attacker to inject a malicious script...

Reflected XSS vulnerability in embeddable-build-status

embeddable-build-status did not sanitize arguments provided in the query string, resulting in a reflected cross-site scripting vulnerability. Arguments are now sanitized...

Stack overflow

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The...

phpFK lite-version Cross Site Scripting

Information: Advisory by Netsparker Name: Multiple Cross-site Scripting Vulnerabilities in phpFK Affected Software: phpFK Affected Versions: lite-version Homepage: https://www.frank-karau.de/ Vulnerability: Reflected Cross-site Scripting Severity: 7.4 High Status: Not Fixed CVSS Score 3.0:...

PT-2019-13230

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions up to and including 2.04B03 Description The issue is a stack-based buffer overflow in the ssi binary, allowing an unauthenticated user to execute arbitrary code. This can be achieved by providing a sufficiently lon...

CVE-2019-13276: Out-of-bounds Write

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The...

CVE-2019-9085

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service invoice-creation outage via the nfile parameter to visualizzacontratto.php with invalid arguments any non-numeric value, as demonstrated by the anno=2019&idtransazione=1&numerocontratto=1&nfile=a query string ...

CVE-2019-12935

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

CVE-2019-12935

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

PT-2019-13034

Name of the Vulnerable Software and Affected Versions Shopware versions prior to 5.5.8 Description The issue allows for XSS via the Query String to the "backend/Login" or "backend/Login/load/" API endpoints. Recommendations For versions prior to 5.5.8, update to version 5.5.8 or later to resolve...

CVE-2019-12935: Improper Neutralization of Input During Web Page Generation

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

CVE-2017-9392

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "requestimage" as one of the service actions for ...

GHSA-HXCM-V35H-MG2X Prototype Pollution in querystringify

A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string...

python: CRLF injection via the query part of the url passed to urlopen()

An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the query string after a ? charact...

CVE-2018-5757

An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi from the Monitoring page in the web UI, unsafely puts user-alterable data directly into an OS command, leading to...