210 matches found
AndSoft e-TMS SQL注入漏洞
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the SessionID cookie parameter in file /inc/connect/CONNECTION.ASP. An attacker can us...
CVE-2025-55847
Wavlink M86X3AV240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings.cgi file. The vulnerability arises because the Cookie parameter does not properly validate the length of input data. Attackers can exploit this to execute arbitrary code or cause a denial of service D...
CVE-2025-55847
The CVE-2025-55847 entry concerns Wavlink M86X3A_V240730. The vulnerability is a buffer overflow in the /cgi-bin/ExportAllSettings.cgi endpoint caused by improper validation of the length of data passed via the Cookie parameter. The issue can allow attackers to execute arbitrary code or cause a d...
CVE-2012-10034
ClanSphere 2011.3 is vulnerable to a local file inclusion LFI flaw due to improper handling of the cslang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further...
PT-2025-31986 · Unknown · Clansphere
Name of the Vulnerable Software and Affected Versions: ClanSphere version 2011.3 Description: ClanSphere version 2011.3 is susceptible to a local file inclusion flaw because of improper handling of the cs lang cookie parameter. The application does not sanitize user-supplied input, which allows...
CVE-2024-42658
An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...
CVE-2024-57687
An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter...
CVE-2022-24121
SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information through a cookie parameter...
CVE-2013-4945
Multiple SQL injection vulnerabilities in BMC Service Desk Express SDE 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the 1 ASPSESSIONIDASSRATTQ, 2 TABLEWIDGET1, 3 TABLEWIDGET2, 4 browserDateTimeInfo, or 5 browserNumberInfo cookie parameter to DashBoardGUI.aspx; or the 6 U...
CVE-2018-11426
A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change...
CVE-2013-2057
YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability...
CVE-2024-57687
An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter...
PHPGurukul Land Record System 安全漏洞
PHPGurukul Land Record System is a land management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Land Record System version 1.0, which originates from an operating system command injection vulnerability that allows remote attackers to execute arbitrary code via a cooki...
CVE-2024-57687
An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter...
CVE-2024-57687
An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter...
CVE-2024-11635
CVE-2024-11635 affects WordPress File Upload plugin for WordPress up to version 4.24.12, enabling unauthenticated remote code execution via the wfu_ABSPATH cookie parameter. Public exploit exists (GitHub). Red Hat and Wordfence entries confirm the issue and note it has been patched; upgrade to 4....
WordPress plugin WordPress File Upload 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...
PT-2025-1673
Name of the Vulnerable Software and Affected Versions WordPress File Upload plugin versions up to and including 4.24.12 Description The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the wfu ABSPATH cookie...
NewStart CGSL MAIN 6.02 : python-requests Vulnerability (NS-SA-2024-0058)
The remote NewStart CGSL host, running version MAIN 6.02, has python-requests packages installed that are affected by a vulnerability: - A flaw was found in the way python-requests set the domain cookie parameter for certain HTTP responses. A remote attacker could use this flaw to modify a cookie...