CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/04/26 5:25 a.m.•33 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

6.5CVSS7.3AI score0.01178EPSS

SaveExploits1References1

NVD•added 2025/04/23 5:16 p.m.•44 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

6.5CVSS0.01178EPSS

SaveExploits1References2

Vulnrichment•added 2025/04/23 12:00 a.m.•13 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

7.3AI score0.01178EPSS

SaveExploits1References2

Cvelist•added 2025/04/23 12:00 a.m.•59 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

0.01178EPSS

SaveExploits1References2

CVE•added 2025/04/23 12:00 a.m.•89 views

CVE-2025-28017

The TOTOLINK A800R router (version 4.1.2cu.5032_B20200408 ) is vulnerable to a Command Injection flaw in the downloadFile.cgi file. The root cause is a lack of proper filtering for special characters and commands within the QUERY_STRING parameter, allowing a remote attacker to execute arbitrary c...

6.5CVSS7.5AI score0.01178EPSS

SaveExploits1References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by