Tenda AX1803 formSetIptv Heap Buffer Overflow DoS

The vulnerability of the formSetIptv function in the microprogramming software for the Tenda AX1803 router is related to buffer overflows in the stack during the processing of the adv.iptv.stballvlans parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a...

RosarioSIS cross-site scripting vulnerability (CNVD-2020-42951)

RosarioSIS is a student information system for school management. A cross-site scripting vulnerability exists in RosarioSIS 6.7.2. The vulnerability stems from improper validation of user-supplied input in the Search.inc.php script. A remote attacker can exploit the vulnerability by using the...

CVE-2020-15717

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exploit this vulnerability using the advanced parameter in a crafted URL...

CVE-2020-15717: Improper Neutralization of Input During Web Page Generation

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exploit this vulnerability using the advanced parameter in a crafted URL...

PT-2020-14604

Name of the Vulnerable Software and Affected Versions RosarioSIS version 6.7.2 Description The issue is caused by improper validation of user-supplied input by the Search.inc.php script, allowing for XSS attacks. A remote attacker could exploit this using the advanced parameter in a crafted URL,...

PT-2009-4665

Name of the Vulnerable Software and Affected Versions DirectAdmin versions 1.33.6 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request. This occurs due to a vulnerability in CMD...