24 matches found
PT-2023-4940
Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.25 Description The issue exists due to inadequate protection of the web page structure in the data debug.php script of the Cacti network monitoring tool. This allows a remote attacker to conduct cross-site scripting...
PT-2020-10249
Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions through 200.7.10.102.64 Description The issue allows a remote attacker to jailbreak the CLI via enable-debug-script-exec with ../../../bin/sh as the parameter. This enables the attacker to execute system...
Revize CMS Query_results.JSP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15481/info Revize CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
TYPO3 Security Bulletin
A debug script exposes system information provided by phpinfo. By default, the script can be executed by a remote user. Component Type: Core Affected Component: Debug Script Version: 3.8.0 and earlier Vulnerability Type: Information Disclosure Severity: Low Problem Description: A debug script...