CVE-2018-13283

CVE-2018-13283 affects the Synology SSL VPN Client before 1.2.5-0226. A vulnerability in client.cgi allows remote attackers to perform man-in-the-middle attacks using manipulated command, hostname, or port parameters. Impact per NVD is high (CVSS v3.0: 7.4) with high confidentiality and integrity...

CVE-2018-13283: Lack of Administrator Control over Security

Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct man-in-the-middle attacks via the 1 command, 2 hostname, or 3 port parameter...

PT-2019-8948

Name of the Vulnerable Software and Affected Versions Synology SSL VPN Client versions prior to 1.2.5-0226 Description The issue is related to a lack of administrator control over security vulnerabilities in the client.cgi component. This allows remote attackers to conduct man-in-the-middle attac...

mcpsac-ny.org XSS vulnerability

Vulnerable URL: http://www.mcpsac-ny.org/g5-bin/client.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 665560 VIP website status:| No Check mcpsac-ny.org SSL connection:| Grade:...

Sql injection

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional aka AWP PRO 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a listzone action to cgi/client.cgi...

PT-2014-8948

Name of the Vulnerable Software and Affected Versions Guruperl.net Advertise With Pleasure! Professional aka AWP PRO versions 6.6 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the group id parameter in a "list zone" action to...

CVE-2014-9345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional aka AWP PRO 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a listzone action to cgi/client.cgi...