70 matches found
CVE-2020-23715: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download...
PT-2021-10935
Name of the Vulnerable Software and Affected Versions Webport CMS version 1.19.10.17121 Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the file parameter to the "file/download" endpoint. Recommendations For Webport CMS version 1.19.10.17121, as a...
WebPort 路径遍历漏洞
WebPort is a remote access and preventive maintenance device. It enables access to control system data and equipment. A path traversal vulnerability exists in Webport CMS in version 1.19.10.17121, which stems from the product failing to properly filter for specific elements in the path of a...
WebPort Cross-Site Scripting Vulnerability
Philips Tasy WebPortal is a Web-based portal system from Philips Europe Philips. A code injection vulnerability exists in WebPort that stems from a cross-site scripting XSS vulnerability in WebPort version 1.19.1 and earlier versions. An attacker could exploit the vulnerability to obtain an...
CVE-2020-18668
Cross Site Scripting XSS vulnerabililty in WebPort =1.19.1 via the description parameter to script/listcalls...
CVE-2020-18668
Cross Site Scripting XSS vulnerabililty in WebPort =1.19.1 via the description parameter to script/listcalls...
Cross site scripting
Cross Site Scripting XSS vulnerabililty in WebPort =1.19.1 via the description parameter to script/listcalls...
CVE-2020-18668
Cross Site Scripting XSS vulnerabililty in WebPort =1.19.1 via the description parameter to script/listcalls...
CVE-2020-18668
CVE-2020-18668 concerns a Cross Site Scripting (XSS) vulnerability in Philips WebPort WebPortal (WebPort) versions
CVE-2020-18667
SQL Injection vulnerability in WebPort =1.19.1 via the new connection, parameter name in type-conn...
CVE-2020-18667
SQL Injection vulnerability in WebPort =1.19.1 via the new connection, parameter name in type-conn...
Sql injection
SQL Injection vulnerability in WebPort =1.19.1 via the new connection, parameter name in type-conn...
CVE-2020-18665
Directory Traversal vulnerability in WebPort =1.19.1 in tags of system settings...
CVE-2020-18664
Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...
CVE-2020-18664
Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...
CVE-2020-18665
Directory Traversal vulnerability in WebPort =1.19.1 in tags of system settings...
Directory traversal
Directory Traversal vulnerability in WebPort =1.19.1 in tags of system settings...
Cross site scripting
Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...