CVE-2007-3574

Multiple cross-site scripting XSS vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the 1 c4trapip, 2 devname, 3 snmpgetcomm, or 4 snmpsetcomm parameter...

CVE-2007-3574

CVE-2007-3574 records multiple XSS vulnerabilities in Cisco Linksys WAG54GS Wireless-G ADSL Gateway, specifically in setup.cgi with firmware 1.00.06. An attacker can inject arbitrary web script or HTML via the parameters c4_trap_ip_, devname, snmp_getcomm, and snmp_setcomm, exploiting unsanitized...

CVE-2007-3574: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the 1 c4trapip, 2 devname, 3 snmpgetcomm, or 4 snmpsetcomm parameter...

Linksys WAG54GS 1.0.6 (Wireless-G ADSL Gateway) - setup.cgi Cross-Site Scripting

Linksys WAG54GS 1.0.6 Wireless-G ADSL Gateway - setup.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/24682/info Linksys Wireless-G ADSL Gateway is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input...

Linksys WAG54GS 1.0.6 (Wireless-G ADSL Gateway) - 'setup.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24682/info Linksys Wireless-G ADSL Gateway is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. Attackers may exploit this issue by enticing victims into opening a malicious URI...

Unfixed XSS vulnerability at www.g-v.be

Security researcher MaXWeL, has submitted on 17/05/2007 a cross-site-scripting XSS vulnerability affecting www.g-v.be, which at the time of submission ranked 2698831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is currently...

CVE-2007-2690: Undefined Security Weakness

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

Unfixed XSS vulnerability at www.apahelpcenter.org

Security researcher Adrian G., has submitted on 13/05/2007 a cross-site-scripting XSS vulnerability affecting www.apahelpcenter.org, which at the time of submission ranked 423179 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/05/2007. It is...

Immunity Canvas: GNERIC_INCLUDE

Name| gnericinclude ---|--- CVE| CVE-2007-0584 Exploit Pack| CANVAS Description| PhP Generic library & framework Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: G-neric CVE Url: https://vulners.com/cve/CVE-2007-0584 CVE Name: CVE-2007-0584...

CVE-2007-0584

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm g-neric allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2007-0584

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm g-neric allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2007-0584: Undefined Security Weakness

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm g-neric allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2006-6411

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...

CVE-2006-6411

The CVE-2006-6411 entry affects Linksys WIP 330 Wireless-G IP Phone, version 1.00.06A, where PhoneCtrl.exe is vulnerable. The underlying issue permits remote denial of service (crash) via a TCP SYN scan, demonstrated by scanning TCP ports 1–65535 with nmap. The public description explicitly state...

CVE-2006-6411: Undefined Security Weakness

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...

CVE-2006-5711

The CVE-2006-5711 entry concerns the ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router. Affected component: HTTP handling that enables remote attackers to read arbitrary files, demonstrated via a request for a router configuration file related to the /html/defs/ URI. Impact is improper disclos...

CVE-2006-5711: Undefined Security Weakness

ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI...

Creasito E-Commerce Content Manager - admin Authentication Bypass

Creasito E-Commerce Content Manager - admin Authentication Bypass ============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass...

Creasito E-Commerce Content Manager (admin) Authentication Bypass

No description provided by source. ============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================...

Creasito E-Commerce Content Manager - 'admin' Authentication Bypass

============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================ Product............: Creasito E-Commerce Conten...