PT-2024-22259 · Technicolor · Tc8715D

Name of the Vulnerable Software and Affected Versions: Technicolor TC8715D version TC8715D-01.EF.04.38.00-180405-S-FF9-D Description: The issue allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via User Defined Service in managed services add.asp. The victim must click...

CVE-2006-2772

CVE-2006-2772 describes an XSS vulnerability in the add.asp component of Hogstorps hogstorp guestbook 2.0. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) headline parameters. The NVD entry lists a CVSS v2 base score of 6.8 (Medium) wi...

CVE-2006-2428

The CVE-2006-2428 issue affects DUbanner 3.1 (DUware) via the add.asp endpoint, where uploading files with arbitrary extensions (e.g., ASP) can lead to remote code execution. Root cause cited is weak server-side validation/enforcement that can be bypassed by clients. Impact is remote code executi...