101 matches found
CVE-2024-46580
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
DrayTek Vigor 3910 安全漏洞
DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the fid parameter of the v2x00.cgi page. An attacker can cause a denial ...
CVE-2024-46580: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
Online Accounting System Security Vulnerability
Online Accounting System is an online accounting system by 59160781 Individual Developer. A security vulnerability exists in Online Accounting System version 1.4.0 and earlier, which stems from a path traversal caused by the parameter fid in the file ckeditor/filemanager/browser/default/image.php...
IBOS SQL Injection Vulnerability
IBOS is a collaborative office management system. A SQL injection vulnerability exists in IBOS OA version 4.5.5, which originates from an unknown function in ?r=file/dashboard/trash&op=del, which leads to sql injection via the parameter fid...
CVE-2022-28094
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...
CVE-2022-28094
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...
CVE-2022-28094
SCBS Online Sports Venue Reservation System v1.0 is affected by a cross-site scripting (XSS) vulnerability via the fid parameter in booking.php. Root cause is unvalidated input leading to script execution. The CVE entry documents this issue; exploitation details, affected versions beyond v1.0, an...
CVE-2022-28094
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...
Online Sports Complex Booking System 跨站脚本漏洞
Online Sports Complex Booking System is an online sports complex booking system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in version v1.0 of the Online Sports Complex Booking System, which was discovered to contain a cross-site scripting XSS...
The vulnerability of the “fid” parameter in the Online-Exam-System software allows a violator to execute arbitrary SQL queries.
The vulnerability of the “fid” parameter in the Online-Exam-System software involves a lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...
Naviwebs Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2020-35976)
Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A cross-site scripting vulnerability exists in the query parameter 'fid' in the navigation.php file in Naviwebs Navigate CMS version 2.9 r1433. The vulnerability stems from the WEB...
CVE-2020-14014
An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS...
School ERP Pro+Responsive 1.0 - 'fid' SQL Injection
Exploit Title: School ERP Pro+Responsive 1.0 - 'fid' SQL Injection Dork: N/A Date: 2018-10-23 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.arox.in/ Software Link: https://sourceforge.net/projects/school-management-system-php/files/latest/download Software Link: http://erp.arox.in/...
Navigate CMS Cross-Site Scripting Vulnerability
Navigate CMS is an open source content management system CMS. A cross-site scripting vulnerability exists in the 'fid' parameter of the navigate.php file in Navigate CMS version 2.8, which can be exploited by remote attackers to inject arbitrary web script or HTML...
Navigate CMS 2.8 - Cross-Site Scripting
Title: Navigate CMS 2.8 - Cross-Site Scripting Author: Felipe "Renzi" Gabriel Date: 2018-09-19 Vendor: https://www.navigatecms.com/en/home Software: Navigate CMS 2.8 CVE: CVE-2018-17255 Technical Details & Description: A Reflected Cross-Site Scripting web vulnerability has been discovered in the...
PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00088)
PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...
Sql injection
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...