71 matches found
EUVD-2007-2419
Malware in sbrugna...
EUVD-2004-0237
Malware in sbrugna...
CVE-2018-10748
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'show ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...
CVE-2024-4993
Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and thereby steal their cookie session credentials...
Ambit Technologies Itech Movie Portal Script SQL Injection Vulnerability
Ambit Technologies Itech Movie Portal Script is a Movie Portal Script from Ambit Technologies, USA. An SQL injection vulnerability exists in Ambit Technologies Itech Movie Portal Script version 7.36, which stems from an unknown function in shownews.php, where manipulation of the parameter id can...
DEBIAN-CVE-2019-7330
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...
UBUNTU-CVE-2019-7330
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...
CVE-2019-7330
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...
CVE-2019-7330: Improper Neutralization of Input During Web Page Generation
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...
CVE-2018-10748
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'show ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...
PT-2018-3913 · D Link · D-Link Dsl-3782
Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 versions 1.01 Description: The issue is related to a buffer overflow in the /userfs/bin/tcapi binary of the Diagnostics component in the D-Link DSL-3782 router's firmware. This can be exploited by passing a long buffer as the...
Photo Transfer (2) v1.0 iOS - Denial of Service Vulnerability
Document Title: =============== Photo Transfer 2 v1.0 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1580 Release Date: ============= 2015-08-20 Vulnerability Laboratory ID VL-ID: ===================================...
CVE-2015-3325
SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the show parameter in the QUERYSTRING to the default URI...
PT-2015-6152
Name of the Vulnerable Software and Affected Versions WP Symposium plugin versions prior to 15.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the show parameter in the QUERY STRING to the default URI in the forum.php file...
CVE-2015-3325: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the show parameter in the QUERYSTRING to the default URI...
CVE-2012-5341: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in statistik.php in Otterware StatIt 4 allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter, 2 show parameter in a stattld action, or 3 order parameter in a statabfragen action...
CVE-2011-4282
Multiple cross-site scripting XSS vulnerabilities in the course-tags functionality in tag/coursetagsmore.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 sort or 2 show parameter...
PT-2012-1830
Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the course-tags functionality. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...
CVE-2011-4282: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the course-tags functionality in tag/coursetagsmore.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 sort or 2 show parameter...
