CVE-2022-3710

A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older than version 19.5 GA...

CVE-2022-3710

Sophos Firewall (pre-19.5 GA) is affected by a post-auth, read‑only SQL injection in the API controller that enables API clients to read non‑sensitive configuration data from the configuration database. The vulnerability’s exploit is described as read access without altering data (impact: confide...

CVE-2022-3710: Improper Neutralization of Special Elements used in an SQL Command

A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older than version 19.5 GA...

Zyxel Issues Patches for 4 New Flaws Affecting AP, API Controller, and Firewall Devices

Zyxel has released patches to address four security flaws affecting its firewall, AP Controller, and AP products to execute arbitrary operating system commands and steal select information. The list of security vulnerabilities is as follows - CVE-2022-0734 - A cross-site scripting XSS...

Fortinet FortiWeb Buffer Overflow Vulnerability (CNVD-2021-99680)

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure web applications and protect sensitive database content. A buffer overflow vulnerability exists, whi...

CVE-2021-43071

A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the LogReport API controller...

CVE-2021-43071: Out-of-bounds Write

A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the LogReport API controller...

FortiWeb - Heap-based buffer overflows in API controller

Multiple heap-based buffer overflow vulnerabilities CWE-122 in web API controllers of FortiWeb may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests...

PT-2021-7463

Name of the Vulnerable Software and Affected Versions FortiWeb versions 6.4.1 through 6.4.0 FortiWeb versions 6.3.15 and earlier FortiWeb versions 6.2.6 and earlier Description A heap-based buffer overflow in FortiWeb allows an attacker to execute unauthorized code or commands via crafted HTTP...

Nextcloud: Missing brute force protection on OAuth2 API controller

Vulnerability description not provided...

CVE-2020-28954

web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...

CVE-2018-10268: Improper Neutralization of Input During Web Page Generation

An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...

PT-2018-9798

Name of the Vulnerable Software and Affected Versions: FastAdmin version 1.0.0.20180417 beta Description: An issue was discovered in the application, allowing for XSS via the avatar parameter in the User.php file, located at the "application/api/controller/" endpoint. Recommendations: For FastAdm...

dayrui FineCms 'oauth' function cross-site scripting vulnerability

dayrui FineCms is China Tianrui dayrui program design team released a set of content management system CMS using MVC architecture and PDO database interface development. A cross-site scripting vulnerability exists in the 'oauth' function of the controllers/member/api.php file in version 5.0.11 of...

File upload vulnerability in WeiPHP 4.0beta frontend

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. A file upload vulnerability exists in WeiPHP 4.0 beta, as ApiController.class.php fails to strictly filter input parameters. A remote attacker can exploit...

IBOS Enterprise Collaboration Management software open source latest version ApiController.php page actionSearch function has SQL injection vulnerability

IBOS is a new enterprise co-location management platform that offers services such as commercial licensing, program customization, data conversion, storage services and more. IBOS enterprise collaborative management software open source latest version of ApiController.php page actionSearch functi...

CVE-2016-3072

Multiple SQL injection vulnerabilities in the scopedsearch function in app/controllers/katello/api/v2/apicontroller.rb in Katello allow remote authenticated users to execute arbitrary SQL commands via the 1 sortby or 2 sortorder parameter...

CVE-2016-3072

Multiple SQL injection vulnerabilities in the scopedsearch function in app/controllers/katello/api/v2/apicontroller.rb in Katello allow remote authenticated users to execute arbitrary SQL commands via the 1 sortby or 2 sortorder parameter...

Security feature bypass

Katello allows remote attackers to cause a denial of service memory consumption via the 1 mode parameter in the setuputils function in contentsearchcontroller.rb or 2 action parameter in the respond function in api/apicontroller.rb in app/controllers/katello/, which is passed to the tosym method...