CVE-2022-32988

CVE-2022-32988 영향을 받는 제품 아직 나열된 모델 외에 다른 Asus 모델은 테스트하지 않았습니다. 그러나 동일한 펌웨어 버전의 다른 모델에서도 동작할 가능성이 있습니다. root@kitploit: DSL-N14UB1 V.1.1.2.3805 개요 라우터 Asus DSL-N14U-B1 1.1.2.3805 에서 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 이 취약점은 저장된 문자열 목록을 포함하는 모든 ".asp" 페이지예: AdvancedFirewallContent.asp,...

EUVD-2018-17545

Malware in sbrugna...

EUVD-2002-2052

Malware in sbrugna...

EUVD-2010-1924

Malware in sbrugna...

CVE-2022-32988

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...

CVE-2022-32988

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...

Cross site scripting

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...

CVE-2022-32988

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...

CVE-2022-32988

CVE-2022-32988 is an XSS vulnerability in Asus DSL-N14U-B1 firmware version 1.1.2.3_805. The issue arises in the web UI exposed through a large set of ASP pages that render lists of stored strings, where the *list parameters (examples: filter_lwlist, keyword_rulelist, etc) are not properly saniti...

Exploit for Cross-site Scripting in Asus Dsl-N14U-B1_Firmware

CVE-2022-32988 Affected products We have not yet tested As...

Sql injection

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 17.1.1. Multiple SQL injection vulnerabilities are present in the legacy .ASP pages, which could allow attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-5778

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 17.1.1. Multiple SQL injection vulnerabilities are present in the legacy .ASP pages, which could allow attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2018-17141 · Ipswitch · Ipswitch Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold versions prior to 2017 Plus SP1 17.1.1 Description: An issue was discovered in the legacy .ASP pages of Ipswitch WhatsUp Gold, where multiple SQL injection vulnerabilities are present. These vulnerabilities could allow...

Microsoft Site Server 3.0 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3999/info Microsoft Site Server is designed to run on Microsoft Windows NT Server platforms. It provides a means for users on a corporate intranet to share, publish, and find information. Site Server Commerce Edition...

MS11-051: Vulnerability in Active Directory Certificate Services Web Enrollment Could Allow Elevation of Privilege (2518295)

A reflected or non-persistent cross-site scriting vulnerability exists in the version of Active Directory Certificate Services Web Enrollment installed on the remote Windows host due to improper validation of a request parameter. By using a specially crafted link, an attacker could leverage the...

CVE-2010-1905

Multiple cross-site scripting XSS vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackers to inject arbitrary web script or HTML via crafted input to ASP pages, as demonstrated using the backurl parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackers to inject arbitrary web script or HTML via crafted input to ASP pages, as demonstrated using the backurl parameter to...

CVE-2010-1905

CVE-2010-1905 concerns multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance. The XSS can be triggered by crafted input to ASP pages, demonstrated via the backurl parameter to sdccommon/verify/asp/n6plugindestructor.asp. The avail...

CVE-2010-1905

Multiple cross-site scripting XSS vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackers to inject arbitrary web script or HTML via crafted input to ASP pages, as demonstrated using the backurl parameter to...

GoAhead WebServer Script Source Code Disclosure

A vulnerable version of GoAhead Webserver is running on the remote host. Description : GoAhead Webserver is installed on the remote system. It's an open-source webserver, which is capable of hosting ASP pages, and installation on multiple operating systems. The version installed is vulnerable to...