132 matches found
CVE-2021-20644
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...
CVE-2021-20644
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...
CVE-2021-20644
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...
PT-2021-14105
Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1467GHBK-A affected versions not specified Description: The issue allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page. Recommendations: At the moment, there...
CVE-2021-20644: Improper Neutralization of Special Elements in Output Used by a Downstream Component
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page...
PT-2020-13603 · Processmaker · Processmaker
Name of the Vulnerable Software and Affected Versions: ProcessMaker version 3.4.11 Description: A SQL injection issue exists in the handling of sort parameters. The sort parameter in the reportTables Ajax and clientSetupAjax pages is vulnerable to SQL injection. An attacker can make an...
CVE-2019-20487
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management console are vulnerable to an unauthenticated GET request exploitable directly or through CSRF, as demonstrated by the setup.cgi?todo=savehtpaccount URI...
PT-2022-16279
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 5.1 through 5.1.1 phpMyAdmin version 5.1.2 is not affected, but all versions prior to 5.1.2 are vulnerable. Description An issue was discovered in phpMyAdmin, allowing an attacker to inject malicious code into aspects of th...
Security update for phpMyAdmin (moderate)
openSUSE Security Update: Security update for phpMyAdmin Announcement ID: openSUSE-SU-2019:2211-1 Rating: moderate References: 1150914 Cross-References: CVE-2019-12922 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 SUSE Package Hub...
phpMyAdmin < 4.9.1 CSRF Vulnerability - Linux
phpMyAdmin is prone to a CSRF vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin"; if descripti...
phpMyAdmin < 4.9.1 CSRF Vulnerability - Windows
phpMyAdmin is prone to a CSRF vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin"; if descripti...
Cross-site Request Forgery (CSRF)
phpMyAdmin is vulnerable to cross-site request forgery CSRF. The attack is possible when the attacker sends a fake hyperlink containing the request, executing on behalf the user, acting as a phpMyAdmin user deleting any server in the Setup page...
DEBIAN-CVE-2019-12922
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page...
CVE-2019-12922
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page...
Cross site request forgery (csrf)
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page...
CVE-2019-12922
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page...
UBUNTU-CVE-2019-12922
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page...
CVE-2019-12922
The CVE-2019-12922 entry concerns a CSRF flaw in phpMyAdmin 4.9.0.1 that allows an attacker to cause deletion of a server from the Setup page by tricking a victim into visiting a crafted page. The root cause is insufficient validation of the HTTP request origin, enabling unauthorized actions on b...
