38 matches found
CVE-2008-6824
The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin account, which makes it easier for remote attackers to obtain access...
CVE-2008-6823
Multiple cross-site request forgery CSRF vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that 1 modify the network configuration via certain...
CVE-2008-6823
Affected devices: A-LINK WL54AP3 and WL54AP2 access points running firmware before 1.4.2-eng1. Issue: multiple CSRF vulnerabilities in the management interface allow remote attackers to hijack administrator authentication by crafting requests to goform/formWanTcpipSetup (network configuration) or...
A-Link routers crossite scripting and request forgery
No description provided...
A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg...
A-Link WL54AP3 and WL54AP2 CSRF+XSS Vulnerability
No description provided by source. Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg [email protected]...
A-Link WL54AP3 WL54AP2 - Cross-Site Request Forgery Cross-Site Scripting
A-Link WL54AP3 WL54AP2 - Cross-Site Request Forgery Cross-Site Scripting Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected]...
alink-xsrfxss.xt
Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg [email protected] Device: A-Link WL54AP3 and WL54AP...
A-Link WL54AP3 and WL54AP2 CSRF+XSS Vulnerability
Exploit for hardware platform in category remote exploits ================================================= A-Link WL54AP3 and WL54AP2 CSRF+XSS Vulnerability ================================================= Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 a...
A-Link WL54AP3 / WL54AP2 - Cross-Site Request Forgery / Cross-Site Scripting
Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg [email protected] Device: A-Link WL54AP3 and WL54AP...
addalink 4 - category_id SQL Injection
addalink 4 - categoryid SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DE...
addalink <= 4 (category_id) Remote SQL Injection Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link = 4 - beta || Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Add a link / Version: = 4 - beta / File affected: userreadlinks.php ...
addalink <= 4 (category_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== addalink $datadescription"; 91: -------------- The var $categoryid isn't verified. Proof of Concept: http://host/addalink-path/userreadlinks.php?categoryid=' UNION SELECT...
addalink-sql.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DESC LIMIT $start,$steps"; 33:...
addalink 4 - 'category_id' SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DESC LIMIT $start,$steps"; 33:...
Add a link 4 - Security Bypass SQL Injection
Add a link 4 - Security Bypass SQL Injection source: https://www.securityfocus.com/bid/31228/info Add a link is prone to multiple security vulnerabilities, including multiple security-bypass issues and an SQL-injection issue. Exploiting the security-bypass issues may allow an attacker to bypass...
Add a link 4 - Security Bypass / SQL Injection
source: https://www.securityfocus.com/bid/31228/info Add a link is prone to multiple security vulnerabilities, including multiple security-bypass issues and an SQL-injection issue. Exploiting the security-bypass issues may allow an attacker to bypass certain security restrictions and perform...
PHPSelect Submit-A-Link - HTML Injection
PHPSelect Submit-A-Link - HTML Injection source: https://www.securityfocus.com/bid/17348/info Submit-A-Link is prone to an HTML-injection vulnerability. The script fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script co...