Lucene search
K

7 matches found

OSV
OSV
added 2025/11/19 3:15 p.m.1 views

CVE-2025-63219

The ITEL ISO FM SFN Adapter firmware ISO2 2.0.0.0, WebServer 2.0 is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and...

7.5CVSS5.8AI score0.00126EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/11/19 12:0 a.m.7 views

CVE-2025-63219

The ITEL ISO FM SFN Adapter firmware ISO2 2.0.0.0, WebServer 2.0 is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and...

0.00126EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-6322

Malware in sbrugna...

7.5CVSS6.4AI score0.00485EPSS
Exploits1References4
Prion
Prion
added 2013/09/06 11:15 a.m.7 views

Design/Logic Flaw

userlogin.jsp in Coursemill Learning Management System LMS 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role value to home.html...

9.3CVSS7.4AI score0.00555EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2009/12/30 9:30 p.m.12 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 home.html or 2 lands.html...

4.3CVSS6.1AI score0.0278EPSS
Exploits1References5Affected Software1
Prion
Prion
added 2009/03/02 4:30 p.m.7 views

Sql injection

SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter...

7.5CVSS9.1AI score0.00485EPSS
Exploits1References3Affected Software1
seebug.org
seebug.org
added 2008/12/12 12:0 a.m.36 views

Xpoze 4.10 (home.html menu) Blind SQL Injection Vulnerability

No description provided by source. ■Xpoze Pro home menù = Blind $ql Injection --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.xpoze.org/ --------------------------------------- ■...

7.1AI score
Exploits0
Rows per page
Query Builder