3797 matches found
Directory traversal
Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...
CVE-2020-23042
CVE-2020-23042 affects Dropouts Technologies LLP Super Backup v2.0.5. The vulnerability is a cross-site scripting (XSS) flaw in the path parameter of the list and download modules, enabling attackers to execute arbitrary web scripts or HTML via a crafted GET request. The issue is due to unsafely ...
CVE-2020-23061
Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...
CVE-2020-23061
The CVE concerns Dropouts Technologies LLP Super Backup v2.0.5, where an improper validation of the path parameter in the list and download modules enables directory traversal by modifying the path to request a local list command. The issue is triggered by a path variable that can be navigated to...
PT-2021-10819
Name of the Vulnerable Software and Affected Versions Dropouts Technologies LLP Super Backup version 2.0.5 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted GET request, exploiting a cross-site scripting XSS vulnerability in the path parameter of the li...
Dropouts Technologies Llp 跨站脚本漏洞
Dropouts Technologies Llp Super Backup is a contact backup application from Dropouts Technologies Llp, India. A cross-site scripting vulnerability exists in Dropouts Technologies LLP Super Backup version 2.0.5, which allows an attacker to execute arbitrary web script or HTML via a crafted GET...
CVE-2020-23042: Improper Neutralization of Input During Web Page Generation
Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...
CVE-2020-23061: Improper Limitation of a Pathname to a Restricted Directory
Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...
PT-2021-10833
Name of the Vulnerable Software and Affected Versions Super Backup version 2.0.5 Description The issue allows attackers to perform a directory traversal via a change to the path variable in the list and download module, enabling them to request the local list command. Recommendations For Super...
Dropouts Technologies Llp Super Backup 路径遍历漏洞
Dropouts Technologies Llp Super Backup is a contact backup application from Dropouts Technologies Llp, India. A security vulnerability exists in Dropouts Technologies LLP Super Backup that allows an attacker to perform directory traversal by changing a path variable to request a local list comman...
CVE-2021-20122
The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69cmd.cgi. A remote attacker connected to the router's LAN and authenticated with a super user account, or using a bypass...
Command injection
The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69cmd.cgi. A remote attacker connected to the router's LAN and authenticated with a super user account, or using a bypass...
CVE-2021-20122
The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69cmd.cgi. A remote attacker connected to the router's LAN and authenticated with a super user account, or using a bypass...
CVE-2020-21503
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free...
CVE-2020-21504
waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?&m=Public&a=login...
CVE-2020-21505
waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php/Link/addsave...
CVE-2020-21506
waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?m=Config&a=add...
CVE-2020-21505
waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php/Link/addsave...
CVE-2020-21503
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free...