CVE-2019-19207

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection...

Sql injection

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection...

PT-2019-15783

Name of the Vulnerable Software and Affected Versions rConfig version 3.9.2 Description The issue allows for SQL injection through the devices.php endpoint, specifically when the searchColumn parameter is manipulated. This can potentially lead to unauthorized access or modification of database...

CVE-2019-19207: Improper Neutralization of Special Elements used in an SQL Command

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection...

K-Net Cisco Configuration Manager Cross-Site Scripting Vulnerability

K-Net Cisco Configuration Manager is a PHP and MySQL based tool for managing the configuration of Cisco devices. A cross-site scripting vulnerability exists in K-Net Cisco Configuration Manager 2014-11-19 and earlier versions, which can be exploited by remote attackers to inject arbitrary web...

CVE-2018-17051

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

CVE-2018-17051

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

Code injection

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

CVE-2018-17051

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

CVE-2018-17051

The CVE concerns K-Net Cisco Configuration Manager up to 2014-11-19 with a Cross-Site Scripting (XSS) vulnerability exploitable via devices.php. CNVD notes it affects PHP/MySQL based deployments. NVD describes XSS via devices.php but does not provide exploit specifics beyond that. No remediation ...

CVE-2018-17051: Improper Neutralization of Input During Web Page Generation

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

PT-2018-13864

Name of the Vulnerable Software and Affected Versions K-Net Cisco Configuration Manager versions through 2014-11-19 Description The issue is related to a security problem where an attacker can execute malicious scripts on the device. This is achieved through the devices.php endpoint, which is...