commend_sqli

CVE-2023-XXXXX Suggested description G8-VOIPREC Commend VoIPRec web interface is vulnerable to time-base blind SQL injections in "Code" parameter on login page. Additional Information PoC: POST /cgi-bin/SecComRecX.cgi HTTP/1.1 Host: 192.168.88.10 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0...

CVE-2026-8747 Z-BlogPHP Commend Approval c_system_event.php CheckComment improper authorization

A weakness has been identified in Z-BlogPHP 1.7.4.3430. This affects the function CheckComment of the file zbsystem/function/csystemevent.php of the component Commend Approval Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been made...

CVE-2026-8747: Improper Authorization

A weakness has been identified in Z-BlogPHP 1.7.4.3430. This affects the function CheckComment of the file zbsystem/function/csystemevent.php of the component Commend Approval Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been made...

EUVD-2024-19381

Malicious code in bioql PyPI...

EUVD-2024-19778

Malicious code in bioql PyPI...

The vulnerability of the microprogrammed anti-vandalism network IP station Commend WS203VICM, related to access control deficiencies, allows a intruder to execute arbitrary commands.

The vulnerability of the microprogrammed anti-vandalism network IP station Commend WS203VICM is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created request...

CVE-2024-22182

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

CVE-2024-21767

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

Improper access control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

Design/Logic Flaw

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

CVE-2024-21767

CVE-2024-21767 affects Commend WS203VICM (versions 1.7 and prior). A remote, unauthenticated attacker can bypass access control by sending a malicious request to the device’s web server, potentially enabling unauthorized actions. The issue is listed alongside other vulnerabilities in the product’...

CVE-2024-21767 Commend WS203VICM Improper Access Control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

CVE-2024-21767 Commend WS203VICM Improper Access Control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

CVE-2024-22182 Commend WS203VICM Argument Injection

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

CVE-2024-22182

The CVE-2024-22182 entry concerns the Commend WS203VICM video door station. A remote, unauthenticated attacker can send crafted messages to the device’s web server causing a restart and service disruption. Technical details across sources identify this as an Argument Injection (CWE-88) flaw affec...

CVE-2024-22182 Commend WS203VICM Argument Injection

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

CVE-2024-21767: Improper Access Control

A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...

Commend WS203VICM Parameter Injection Vulnerability

The Commend WS203VICM is a vandalism prevention station with a camera and call button from Commend. A parameter injection vulnerability exists in the Commend WS203VICM that originates from weakly encoding credentials used to transmit the WS203VICM...

Commend WS203VICM Parameter Injection Vulnerability

The Commend WS203VICM is a vandalism prevention station with a camera and call button from Commend. The Commend WS203VICM suffers from a parameter injection vulnerability that originates from a vulnerability that allows an unauthenticated, remote attacker to send a crafted message to the web serv...

Commend WS203VICM Access Control Error Vulnerability

The Commend WS203VICM is a vandal resistant station with camera and call button from Commend. An access control error vulnerability exists in Commend WS203VICM version 1.7 and prior versions, which originated to allow remote attackers to bypass the access control of the Commend WS203VICM by...