PT-2024-22259 · Technicolor · Tc8715D

Name of the Vulnerable Software and Affected Versions: Technicolor TC8715D version TC8715D-01.EF.04.38.00-180405-S-FF9-D Description: The issue allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via User Defined Service in managed services add.asp. The victim must click...

CVE-2006-6994: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP files by removing the client-side security checks...

CVE-2006-2772

CVE-2006-2772 describes an XSS vulnerability in the add.asp component of Hogstorps hogstorp guestbook 2.0. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) headline parameters. The NVD entry lists a CVSS v2 base score of 6.8 (Medium) wi...

CVE-2006-2772: Undefined Security Weakness

Cross-site scripting XSS vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, and 3 headline parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2006-2428

The CVE-2006-2428 issue affects DUbanner 3.1 (DUware) via the add.asp endpoint, where uploading files with arbitrary extensions (e.g., ASP) can lead to remote code execution. Root cause cited is weak server-side validation/enforcement that can be bypassed by clients. Impact is remote code executi...

CVE-2006-2428: Unrestricted Upload of File with Dangerous Type

add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw sour...