45 matches found
Stack overflow
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function...
CVE-2022-32051
CVE-2022-32051 concerns the TOTOLINK T6 router. A stack overflow is triggered in FUN_004133c4 via the desc, week, sTime, and eTime parameters, with input length not checked, affecting TOTOLINK T6 version 4.1.9cu.5179_B20201015. The vulnerability can cause a denial of service due to uncontrolled s...
PT-2022-21076 · Totolink · Totolink T6
Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered in the TOTOLINK T6, affecting the desc, week, sTime, and eTime parameters within the FUN 004133c4 function. Recommendations: For TOTOLINK T6 version...
CVE-2008-4620
SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...
CVE-2006-3909: Undefined Security Weakness
Cross-site scripting XSS vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via the week parameter...