CVE-2021-35062

A Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung March-2021 allow an attacker with a valid token of a COVID-19 test result to execute shell commands with the permissions of the web server...

CVE-2021-35062

The CVE-2021-35062 entry describes a Shell Metacharacter Injection in the file result.php of the DRK Odenwaldkreis Testerfassung March-2021 . The flaw allows an attacker who has a valid COVID-19 test result token to trigger shell commands with the web server’s privileges, indicating a remote comm...

CVE-2021-35061

Multiple cross-site scripting XSS vulnerabilities in DRK Odenwaldkreis Testerfassung March-2021 allow remote attackers to inject arbitrary web script or HTML via all parameters to HTML form fields in all components...

PT-2021-20821

Name of the Vulnerable Software and Affected Versions: DRK Odenwaldkreis Testerfassung March-2021 Description: A Shell Metacharacter Injection issue in result.php allows an attacker with a valid token of a COVID-19 test result to execute shell commands with the permissions of the web server...

CVE-2021-35062: Improper Neutralization of Special Elements used in an OS Command

A Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung March-2021 allow an attacker with a valid token of a COVID-19 test result to execute shell commands with the permissions of the web server...

PT-2021-20820

Name of the Vulnerable Software and Affected Versions: DRK Odenwaldkreis Testerfassung version March-2021 Description: The issue allows remote attackers to inject arbitrary web script or HTML via all parameters to HTML form fields in all components. This can be exploited by sending malicious inpu...

CVE-2021-35061: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in DRK Odenwaldkreis Testerfassung March-2021 allow remote attackers to inject arbitrary web script or HTML via all parameters to HTML form fields in all components...

drk-tecklenburg.de Cross Site Scripting vulnerability OBB-1253829

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

drk-vaihingen.de XSS vulnerability

Open Bug Bounty ID: OBB-678963 Description| Value ---|--- Affected Website:| drk-vaihingen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

drk-blutspende.de XSS vulnerability

Vulnerable URL: http://www.drk-blutspende.de/blutspendetermine/blutspendetermin-button-ihre-auswahl.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 477989 VIP website status:| N...

De-randomizing the Kernel ASLR vulnerabilities (DrK )

For details refer to the document: http://www.cc.gatech.edu/%7Eyjang37/assets/papers/2016/jang:drk-ccs.pdf...

Blutspende beim DRK - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Blutspende beim DRK published at the 'play' market has multiple vulnerabilities...

DRK-App - Rotkreuz-App des DRK - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application DRK-App - Rotkreuz-App des DRK published at the 'play' market has multiple vulnerabilities...