8 matches found
CVE-2021-43661
totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /home.asp...
Cross site scripting
Cross-site scripting XSS vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp...
CVE-2017-11650
Cross-site scripting XSS vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp...
CDPI Software SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...
CDPI Software SQL Injection Vulnerability
Exploit for asp platform in category web applications CDPI Software SQL Injection Vulnerability Software : CDPIsite Date : 2/18/2012 Vendor : http://www.cdpisite.com.br Language : ASP Dork : "Powered by CDPIsite" Author : ITTIHACK Home : http://ittihack.com Vulnerable File: home.asp Exploit:...
NatterChat Security Bypass Vulnerability
The host is running NatterChat and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodnatterchatsecbypassvul.nasl 5122 2017-01-27 12:16:00Z teissa $ NatterChat Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.co...
NatterChat Security Bypass Vulnerability
NatterChat is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sql injection
Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the 1 txtUsername parameter aka Username and 2 txtPassword parameter aka Password in a form generated by home.asp. NOTE: due to lack of details, it is not...