2541 matches found
CVE-2015-9273
The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...
CVE-2015-9273
CVE-2015-9273 affects the WordPress plugin wp-slimstat (Slimstat Analytics) , with an XSS vulnerability exploitable via an HTTP Referer header or a related JavaScript Referer tracking field. Affected versions are prior to 4.1.6.1 . The issue is documented across multiple sources confirming a stor...
CVE-2015-9273: Improper Neutralization of Input During Web Page Generation
The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...
PT-2018-4582
Name of the Vulnerable Software and Affected Versions wp-slimstat aka Slimstat Analytics versions prior to 4.1.6.1 Description The issue allows for XSS attacks through either an HTTP Referer header or a field associated with JavaScript-based Referer tracking. Recommendations For versions prior to...
Input validation
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field...
CVE-2018-15700
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...
CVE-2018-15702
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field...
CVE-2018-15700
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...
CVE-2018-15702
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field...
CVE-2018-15700
The CVE-2018-15700 issue affects TP-Link TL-WRN841N running 0.9.1 4.16 v0348.0 where an unauthenticated LAN user can trigger a denial of service by sending a crafted HTTP header with an unexpected Referer field. Public documentation/connected sources describe the vulnerability in the device web i...
CVE-2018-15700: Improper Input Validation
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...
PT-2018-13154
Name of the Vulnerable Software and Affected Versions TP-Link TL-WRN841N version 0.9.1 4.16 v0348.0 Description The web interface is susceptible to CSRF attacks due to inadequate validation of the referer field. Recommendations For TP-Link TL-WRN841N version 0.9.1 4.16 v0348.0, consider...
PT-2018-13152
Name of the Vulnerable Software and Affected Versions TP-Link TL-WRN841N version 0.9.1 4.16 v0348.0 Description The web interface is susceptible to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field. Recommendations For TP-Link...
CVE-2018-15702: Cross-Site Request Forgery (CSRF)
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field...
CVE-2018-17130
PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...
CVE-2018-17130
PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...
Design/Logic Flaw
PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...
CVE-2018-17130
PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...
CVE-2018-17130
CVE-2018-17130 affects PHPMyWind 5.5, with a cross-site scripting (XSS) flaw in member.php triggered via the HTTP Referer header. Connected sources (CNVD-2018-19539 and CNVD-derived summaries) describe an attacker-capable scenario where the vulnerability can lead to theft of an administrator cook...