CVE-2022-37149: Improper Neutralization of Special Elements used in an OS Command

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter...

CVE-2022-36455

TOTOLink A3600R V4.1.2cu.5182B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36455

TOTOLink A3600R V4.1.2cu.5182B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

Command injection

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36455

TOTOLink A3600R V4.1.2cu.5182B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36456

Totolink A720R firmware 4.1.5cu.532_B20210610 contains a command-injection flaw in /cstecgi.cgi caused by insufficient sanitization of the username parameter. This yields potential local command execution. The PT-2022-23380 advisory confirms the affected version and recommends restricting access ...

TOTOLINK A720R 操作系统命令注入漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK with dual-band Wi-Fi capabilities, focusing on high-speed internet and signal coverage. The TOTOLINK A720R suffers from a command injection vulnerability that originates from a command injection issue with the username...

PT-2022-23380 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLink A720R version 4.1.5cu.532 B20210610 Description: A command injection issue was discovered via the username parameter in the "/cstecgi.cgi" API endpoint. This allows for potential command injection attacks. Recommendations: For TOTOLi...

PT-2022-23379 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLink A3600R version 4.1.2cu.5182 B20201102 Description: A command injection issue was found via the username parameter in the "/cstecgi.cgi" API endpoint. This allows for potential command injection attacks. Recommendations: For TOTOLink...

CVE-2022-36455: Improper Neutralization of Special Elements used in an OS Command

TOTOLink A3600R V4.1.2cu.5182B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36456: Improper Neutralization of Special Elements used in an OS Command

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

TOTOLINK A3600R 操作系统命令注入漏洞

The TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK A3600R version V4.1.2cu.5182B20201102, which stems from a command injection issue with the username parameter in the /cstecgi.cgi location...

CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...

CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...

CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...

InventoryManagementSystem SQL注入漏洞

InventoryManagementSystem is an inventory management system by Sajan Rajbhandari, an individual developer. It provides an easy way to track products, suppliers, customers, and purchasing and sales information. A SQL injection vulnerability exists in InventoryManagementSystem version 1.0, which...

CVE-2022-35598: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...