50 matches found
CVE-2023-39073
An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...
CVE-2023-33274
The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface CGI scripts without proper identification or authorization. This vulnerability arises from a lack of proper cookie verification and...
CVE-2025-23519
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jas Saran G Web Pro Store Locator gwebpro-store-locator allows Reflected XSS.This issue affects G Web Pro Store Locator: from n/a through = 2.0.1...
CVE-2025-23519
CVE-2025-23519 affects the WordPress plugin G Web Pro Store Locator (versions
WordPress plugin G Web Pro Store Locator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
CVE-2024-11682
The G Web Pro Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-11682 G Web Pro Store Locator <= 2.1 - Reflected Cross-Site Scripting
The G Web Pro Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2024-11682
CVE-2024-11682 : The G Web Pro Store Locator WordPress plugin is vulnerable to a reflected Cross-Site Scripting (XSS) via the q parameter in all versions up to and including 2.1, caused by insufficient input sanitization and output escaping. This enables unauthenticated attackers to inject arbitr...
CVE-2024-11682 G Web Pro Store Locator <= 2.1 - Reflected Cross-Site Scripting
The G Web Pro Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
Voltronic Power SNMP Web Pro Cross-Site Scripting Vulnerability
Voltronic Power SNMP Web Pro is an SNMP network card management software from Voltronic Power. Voltronic Power SNMP Web Pro suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code via specially crafted scripts...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
Cross site scripting
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
Voltronic Power SNMP Web Pro 安全漏洞
Voltronic Power SNMP Web Pro is an SNMP network card management software from Voltronic Power. Voltronic Power SNMP Web Pro suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code via specially crafted scripts...
CVE-2023-49563
Summary: CVE-2023-49563 affects Voltronic Power SNMP Web Pro, version 1.1. The issue is a Cross Site Scripting (XSS) vulnerability in the web interface that allows an attacker to execute arbitrary code via a crafted script in a request to the webserver. The description across sources consistently...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
CVE-2023-39073
An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...