2 matches found
CVE-2018-0432: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting applicatio...
9CVSS7.9AI score0.02633EPSS
SaveExploits0References3
CVE-2014-8960
Cross-site scripting XSS vulnerability in libraries/errorreport.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename...
5AI score
SaveExploits0References6
20