8 matches found
WordPress plugin NPS computy 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
VulnCheck KEV: CVE-2010-2506
Cross-site scripting XSS vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter...
CVE-2023-51833
A command injection issue in TRENDnet TEW-411BRPplus v.2.07eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...
TRENDnet TEW-411BRPplus Command Injection Vulnerability
The TRENDnet TEW-411BRPplus is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-411BRPplus version v.2.07eu, which originates from a vulnerability that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...
PT-2024-14307
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-411BRPplus version 2.07 eu Description A command injection issue exists in TRENDnet TEW-411BRPplus version 2.07 eu that allows a local attacker to execute arbitrary code. This is achieved by manipulating the data1 parameter within...
VulnCheck KEV: CVE-2010-1573
Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username Gemtek and password gemtekswd for a debug interface for certain web pages, which allows remote attackers to execute arbitrary commands via the 1 data1, 2 data2, or 3 data3 parameters to a Debugcommandpage.asp...
CVE-2010-2506
Cross-site scripting XSS vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter...
CVE-2010-2506
Cross-site scripting XSS vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter...