Edimax BR-6288ACL 代码注入漏洞

Edimax BR-6288ACL is a wireless router from China Xunzhou Edimax Company. A code injection vulnerability exists in the Edimax BR-6288ACL version 1.30, which stems from a cross-site scripting issue contained in the SSID parameter of the wireless5gbasic.asp file, which could lead to a remote attack...

Vtiger CRM 代码注入漏洞

Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by Vtiger, Inc. in the United States. The management system provides functions such as managing, collecting and analyzing customer information. A code injection vulnerability exists in Vtiger CRM versio...

FiberHome AN5506-01A 代码注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A code injection vulnerability exists in the FiberHome AN5506-01A ONU GPON RP2511, which originates from a cross-site scripting issue in the pfDescription parameter of the Port Forwarding...

Netis WF2780 代码注入漏洞

Netis WF2780 is a networking device from Netis Inc. Provides AC routers to deliver next-generation Wi-Fi at gigabit speeds. A code injection vulnerability exists in the Netis WF2780 version 2.1.41925, which stems from a cross-site scripting issue contained in the SSID parameter of the Wireless 2....

FiberHome AN5506-01A 代码注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A code injection vulnerability exists in the FiberHome AN5506-01A, which originates from a cross-site scripting issue in the urlIP parameter of the URL Filtering Submenu component in the...

FiberHome AN5506-01A ONU GPON RP2511 代码注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A code injection vulnerability exists in the FiberHome AN5506-01A ONU GPON RP2511, which stems from a cross-site scripting issue in the Description parameter of the NAT Submenu component...

CVE-2024-13900

The Head, Footer and Post Injections plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.3.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject PHP Code in multisite environments...

Code-Projects Blood Bank System 代码注入漏洞

Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A code injection vulnerability exists in Code-Projects Blood Bank System version 1.0, which stems from a cross-site scripting attack due to an incorrect manipulation of the parameter Bloodname...

SourceCodester E-Learning System 代码注入漏洞

SourceCodester E-Learning System is a SourceCodester open source e-learning system. A code injection vulnerability exists in SourceCodester E-Learning System version 1.0. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

Code-Projects Blood Bank System 代码注入漏洞

Code-Projects Blood Bank System is an open source blood bank management system from Code-Projects. A code injection vulnerability exists in code-projects Blood Bank System version 1.0, which stems from a cross-site scripting attack due to a mishandling of the parameter email...

SourceCodester Employee Management System 代码注入漏洞

SourceCodester Employee Management System is SourceCodester open source a php-based for employee performance management system . A code injection vulnerability exists in version 1.0 of the SourceCodester Employee Management System, which originates from cross-site scripting due to incorrect...

SourceCodester Best Employee Management System 代码注入漏洞

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Best Employee Management System, which originates from cross-site scripting due to incorrect manipulation of the...

Code-Projects Blood Bank System 代码注入漏洞

Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A code injection vulnerability exists in Code-Projects Blood Bank System version 1.0, which stems from a cross-site scripting attack due to an incorrect manipulation of the parameter message...

CVE-2025-0953

The CVE-2025-0953 entry concerns the SMTP for Sendinblue – YaySMTP WordPress plugin. It describes a Stored Cross-Site Scripting (XSS) flaw in versions up to 1.1.1 caused by insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject scripts that execute when ...

WordPress plugin Custom Post Type Date Archives 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection vulnerability exis...

WordPress plugin Show Me The Cookies 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in the...

Scale 代码注入漏洞

Scale is an open source work, project and task management platform with more than 30 features by pankajindevops individual developers. Scale suffers from a code injection vulnerability that stems from a cross-site scripting vulnerability in the goal parameter of the /scale/project location...

CVE-2025-27106 Code injection in binance-trading-bot

binance-trading-bot is an automated Binance trading bot with trailing buy/sell strategy. Authenticated users of binance-trading-bot can achieve Remote Code Execution on the host system due to a command injection vulnerability in the /restore endpoint. The restore endpoint of binance-trading-bot i...

CVE-2024-28776

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2024-13900

The Head, Footer and Post Injections plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.3.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject PHP Code in multisite environments...