10 matches found
CVE-2019-7546
An issue was discovered in SIDU 6.0. The dbs parameter of the conn.php page has a reflected Cross-site Scripting XSS vulnerability...
EUVD-2019-17086
Malware in sbrugna...
CVE-2019-13373: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in the D-Link Central WiFi Manager CWM100 before v1.03R0100BETA6. Input does not get validated and arbitrary SQL statements can be executed in the database via the /web/Public/Conn.php parameter dbSQL...
Cross site scripting
An issue was discovered in SIDU 6.0. The dbs parameter of the conn.php page has a reflected Cross-site Scripting XSS vulnerability...
CVE-2019-7546
An issue was discovered in SIDU 6.0. The dbs parameter of the conn.php page has a reflected Cross-site Scripting XSS vulnerability...
CVE-2019-7546
SIDU 6.0 is affected by a reflected XSS in the dbs parameter of conn.php. The vulnerability allows injection of scripts via a crafted URL, with impact described in the CVE as partial integrity impact and low confidentiality impact (CVSS details: CVSSv2 base 4.3 MEDIUM; CVSSv3 base 6.1 MEDIUM). No...
PT-2019-18638
Name of the Vulnerable Software and Affected Versions SIDU version 6.0 Description A reflected Cross-site Scripting XSS issue was found. The dbs parameter of the 'conn.php' page is vulnerable. Recommendations For SIDU version 6.0, update the conn.php page to properly sanitize the dbs parameter to...
CVE-2019-7546: Improper Neutralization of Input During Web Page Generation
An issue was discovered in SIDU 6.0. The dbs parameter of the conn.php page has a reflected Cross-site Scripting XSS vulnerability...
PT-2018-3062
Name of the Vulnerable Software and Affected Versions D-Link Central WiFi Manager CWM100 versions prior to v1.03R0100 BETA6 Description The issue is related to the lack of protection against SQL query structure exploitation in the /web/Public/Conn.php component. This allows a remote attacker to...
