PT-2024-8264

Name of the Vulnerable Software and Affected Versions Netgear R7000P version 1.3.3.154 Description The issue is related to a stack overflow vulnerability in the usbISP detail edit.cgi script, specifically via the apn parameter. This vulnerability can be exploited by sending a crafted POST request...

PT-2015-3502

Name of the Vulnerable Software and Affected Versions CosmoShop ePRO version 10.05.00 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify settings via a setup action. Recommendations For version 10.05.00, a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter in addlinklwp.cgi and the 2 id, 3 forgotid, and 4 forgotpass parameters in edit.cgi...

CVE-2006-1943: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter in addlinklwp.cgi and the 2 id, 3 forgotid, and 4 forgotpass parameters in edit.cgi...

CVE-2002-1427

The CVE-2002-1427 entry affects Easy Homepage Creator 1.0. The print_html_to_file function in edit.cgi does not validate user credentials, enabling remote attackers to modify other users’ home pages. CVSS v2 data reports a base score of 7.5 ( HIGH ) with network attack vector, no authentication, ...

CVE-2002-1427: Undefined Security Weakness

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...