2961 matches found
Pro2col Stingray FTS 跨站脚本漏洞
Pro2col StingRay FTS is a file transfer server for Internet communication from Pro2col, UK. A cross-site scripting vulnerability exists in the Pro2col Stingray FTS that stems from the fact that manipulation of the Username parameter can lead to a cross-site scripting vulnerability...
PT-2022-7719 · Unknown · Pro2Col Stingray Fts
Name of the Vulnerable Software and Affected Versions: Pro2col Stingray FTS affected versions not specified Description: A problematic issue has been found in the software, where the manipulation of the Username argument leads to cross-site scripting. The attack can be initiated remotely. It is...
Sql injection
WebRun 3.6.0.42 is vulnerable to SQL Injection via the P0 parameter used to set the username during the login process...
D-Link Dsl-2730E Cross-Site Scripting Vulnerability
D-Link Dsl-2730E is a wireless modem router from D-Link, China. D-Link DSL-2730E CT-20131125 is vulnerable to a cross-site scripting vulnerability that allows XSS to access the password page in the maintenance configuration via the username parameter. No details of the vulnerability are currently...
CVE-2022-25393
Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2022-25393
Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
Sql injection
Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
CVE-2022-25393
CVE-2022-25393 affects Simple Bakery Shop Management v1.0. The vulnerability is a SQL injection in the username parameter, as stated across multiple sources. No explicit exploit details or active exploit status are provided in the connected documents. Remediation details (e.g., patch version) are...
CVE-2022-25393: Improper Neutralization of Special Elements used in an SQL Command
Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
PT-2022-17257
Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management version 1.0 Description A SQL injection issue was found, which can be exploited via the username parameter. Recommendations For Simple Bakery Shop Management version 1.0, consider restricting access to the...
CVE-2021-46108
D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...
CVE-2021-46108: Improper Neutralization of Input During Web Page Generation
D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...
PT-2022-1649
Name of the Vulnerable Software and Affected Versions D-Link DSL-2730E CT-20131125 Description The issue allows for cross-site scripting XSS attacks via the username parameter to the password page in the maintenance configuration. This is due to a lack of protection measures for the web page...
Mitsubishi Electric SmartRTU Cross-site Scripting (CVE-2018-16061)
Mitsubishi Electric SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2021-40408
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 1 or 2, based on DDNS type, the ddns-username variable, that has the value of the userName parameter provided through the SetDdns API, is not validated properly. Th...
CVE-2021-40408: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 1 or 2, based on DDNS type, the ddns-username variable, that has the value of the userName parameter provided through the SetDdns API, is not validated properly. Th...
SourceCodester Storage Unit Rental Management System SQL Injection Vulnerability
SourceCodester Storage Unit Rental Management System is a storage unit rental management system that helps manage storage unit rental business records and monitor their records. sourceCodester Storage Unit Rental Management A SQL injection vulnerability exists in the v1 version of the System. The...
SourceCodester Online Leave Management System SQL注入漏洞
SourceCodester Online Leave Management System is an online leave management system. v1 of SourceCodester Online Leave Management System is vulnerable to SQL injection. system/classes/Login.php parameter lacks effective filtering and escaping, which can be exploited to execute arbitrary SQL comman...