ILIAS Cross-Site Scripting Vulnerability (CNVD-2018-03162)

ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, and live chat. A cross-site scripting vulnerability exists in ILIAS. A remote attacker can exploit this vulnerability by sending a 'cmd' parameter to the...

ILIAS < 5.2.4 XSS Vulnerability

ILIAS eLearning is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2018-5688: Improper Neutralization of Input During Web Page Generation

ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes/class.ilSetupGUI.php in the Setup component...

PT-2018-17085

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 5.2.4 Description: The issue concerns a problem with the displayHeader function in the Setup component, specifically in the setup/classes/class.ilSetupGUI.php file. It allows for XSS via the cmd parameter...

D-Link Router Cmd Authentication Bypass

The vulnerability of the cmd parameter in D-Link DNS-320L, D-Link DNS-327L, D-Link DNR-326, D-Link DNS-320B, D-Link DNS-345, D-Link DNS-325, and D-Link DNS-322L routers is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass...

phpFileManager cmd Parameter Command Execution

A remote command execution vulnerability exists in phpFileManager. The vulnerability is due to a design weakness when handling HTTP requests with "action" parameter set to 6 or 9. A remote user can exploit this vulnerability by injecting arbitrary command in the "cmd" parameter...

PT-2015-7418

Name of the Vulnerable Software and Affected Versions JSP/MySQL Administrador Web version 1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that execute arbitrary SQL commands. This is achieved via the cmd parameter to the...

CVE-2015-6944: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the authentication of users for requests that execute arbitrary SQL commands via the cmd parameter to sys/sys/listaBD2.jsp...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

DEBIAN-CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

Directory traversal

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-4427

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2007-6700

Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...

CVE-2007-6700: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...

CVE-2008-0148: Undefined Security Weakness

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request...

CVE-2008-0148

CVE-2008-0148 affects TUTOS 1.3, where access to php/admin/cmd.php is not restricted, allowing remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request. The vulnerability is described with a base CVSSv2 score of 10.0 (HIGH) and a complete impact on confidenti...

CVE-2007-5673

Cross-site scripting XSS vulnerability in cgi-bin/webif.exe in ifnet WebIf allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...

CVE-2007-5673

CVE-2007-5673 is a confirmed cross-site scripting (XSS) vulnerability in the device’s web interface: specifically the cgi-bin/webif.exe component of the ifnet WebIf. The issue allows remote attackers to inject arbitrary web script or HTML via the cmd parameter, resulting in likely client-side scr...