CVE-2021-46228

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpddebug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter...

CVE-2021-46228

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpddebug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter...

CVE-2021-45733

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter hosttime...

Command injection

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpddebug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter...

CVE-2021-46230

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgradefilter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters...

CVE-2022-24162

CVE-2022-24162 concerns the Tenda AX3 router. The connected documents confirm a stack overflow in the function saveParentControlInfo, affected by an improper handling of the time parameter, which can be exploited to cause a Denial of Service. The vulnerability is documented for firmware version v...

CVE-2021-46230: Improper Neutralization of Special Elements used in a Command

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgradefilter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters...

CVE-2022-24162: Out-of-bounds Write

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the time parameter...

PT-2022-16512

Name of the Vulnerable Software and Affected Versions Tenda AX3 version 16.03.12.10 CN Description A stack overflow was discovered in the saveParentControlInfo function, allowing attackers to cause a Denial of Service DoS via the time parameter. Recommendations For Tenda AX3 version 16.03.12.10 C...

D-Link Di-7200G command injection vulnerability

D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200GV2.E1 v21.04.09E1 is vulnerable to a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via path and time parameters...

D-Link Di-7200G command injection vulnerability

D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200GV2.E1 v21.04.09E1 is vulnerable to a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the time parameter...

TotoLink X5000R command injection vulnerability

Totolink X5000R is a router from China's Gion Electronics Totolink. TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands by parameterizing the host time...

CVE-2021-46228: Improper Neutralization of Special Elements used in a Command

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpddebug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter...

Tenda AX3 buffer error vulnerability

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which stems from a stack overflow in the function savparentcontrolinfo that does not properly check the time parameter. An attacker could cau...

PT-2022-1552

Name of the Vulnerable Software and Affected Versions D-Link DI-7200G versions V2.E1 Description The issue is related to insufficient input validation in the httpd debug.asp file, specifically with the time parameter. This allows a remote attacker to execute arbitrary commands. Recommendations Fo...

CVE-2021-24946

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mecloadsinglepage AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue...

CVE-2021-24946

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mecloadsinglepage AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue...

PT-2021-16381 · WordPress · Modern Events Calendar Lite

Name of the Vulnerable Software and Affected Versions: The Modern Events Calendar Lite WordPress plugin versions prior to 6.1.5 Description: The issue is related to an unauthenticated SQL injection problem. It occurs because the time parameter is not properly sanitised and escaped before being us...

VulnCheck KEV: CVE-2021-24946

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mecloadsinglepage AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue...

CVE-2021-39413

Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...