46 matches found
CVE-2026-3380
A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...
Small CRM manage-tickets.php file SQL Injection Vulnerability
Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the frmid and aremark parameters of manage-tickets.php. An attacker can exploit this vulnerability to execu...
CVE-2024-44644
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...
CVE-2024-44644
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...
PHPGurukul Small CRM 安全漏洞
Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the frmid and aremark parameters of manage-tickets.php. An attacker can exploit this vulnerability to execu...
CVE-2024-44644
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...
EUVD-2004-1295
Malware in sbrugna...
AndSoft e-TMS 跨站脚本漏洞
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...
Malicious code in @zalastax/nolb-frm (npm)
The package @zalastax/nolb-frm was found to contain malicious code...
MAL-2025-11492 Malicious code in @zalastax/nolb-frm (npm)
The package @zalastax/nolb-frm was found to contain malicious code...
PT-2024-24463 · Logint · Logint Lomag Inventory Management
Name of the Vulnerable Software and Affected Versions: LOGINT LoMag Inventory Management versions 1.0.20.120 and before Description: The issue allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop, and frmSettings components. This is a SQL Injection...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Mar-2024 Release 1, which stems from an out-of-bounds read vulnerability in the ssmisgetfrm meth...
CVE-2016-9804
In BlueZ 5.42, a buffer overflow was observed in "commandsdump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm-ptr" parameter. This issue can be...
Michael Kohn VB2C 0.02 FRM File Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12020/info VB2C is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code via a URL in the pathCGX parameter to 1 mtdialogo.php, 2 ltdialogo.php, 3 login.php, and 4 logingecon.php in inc/; and multiple unspecified files in frm/, sql/, and cns/...
cgx-rfi.txt
CGX 2005-03-14 pathCGX Remote File Include Vulnerablites D.Script: http://codigolivre.org.br/frs/?groupid=413&releaseid=1978 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/inc/mtdialogo.php?pathCGX=Shell Exploit:Path/inc/ltdialogo.php?pathCGX=Shell...
CGX 20050314 (pathCGX) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ CGX 20050314 pathCGX Remote File Inclusion Vulnerabilities ============================================================ CGX 2005-03-14 pathCGX Remote File Include Vulnerablites...
CGX 20050314 - 'pathCGX' Remote File Inclusion
CGX 2005-03-14 pathCGX Remote File Include Vulnerablites D.Script: http://codigolivre.org.br/frs/?groupid=413&releaseid=1978 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/inc/mtdialogo.php?pathCGX=Shell Exploit:Path/inc/ltdialogo.php?pathCGX=Shell...
CVE-2006-0204
Multiple cross-site scripting XSS vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via 1 the "Course name" field in index.php when the frm parameter has the value "mine" and 2 possibly certain other fields in unspecified scripts...