4690 matches found
CVE-2018-15700
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...
Design/Logic Flaw
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Cookie field...
Design/Logic Flaw
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...
CVE-2018-15700
The CVE-2018-15700 issue affects TP-Link TL-WRN841N running 0.9.1 4.16 v0348.0 where an unauthenticated LAN user can trigger a denial of service by sending a crafted HTTP header with an unexpected Referer field. Public documentation/connected sources describe the vulnerability in the device web i...
CVE-2018-15700
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...
CVE-2018-15701
CVE-2018-15701 affects TP-Link TL-WRN841N (firmware 0.9.1 4.16 v0348.0) where the web interface is vulnerable to a denial-of-service when an unauthenticated LAN user sends a crafted HTTP header with an unexpected Cookie field. The issue is triggered via the web management interface; the precise r...
CVE-2018-15701
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Cookie field...
PT-2018-13153
Name of the Vulnerable Software and Affected Versions TP-Link TL-WRN841N version 0.9.1 4.16 v0348.0 Description The web interface is susceptible to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Cookie field. Recommendations For TP-Link...
CVE-2018-15701: Improper Input Validation
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Cookie field...
CVE-2018-15700: Improper Input Validation
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...
PT-2018-13152
Name of the Vulnerable Software and Affected Versions TP-Link TL-WRN841N version 0.9.1 4.16 v0348.0 Description The web interface is susceptible to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field. Recommendations For TP-Link...
CVE-2018-17136
zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...
Sql injection
zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...
CVE-2018-17136
CVE-2018-17136 affects ZZCMS v8.3, with a SQL Injection in /user/check.php exploitable via the Client-Ip HTTP header. Root cause is improper handling of the header leading to SQL command injection. Exploitation details are not provided beyond the architectural description; CVSS metrics indicate a...
CVE-2018-17136: Improper Neutralization of Special Elements used in an SQL Command
zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...
Monstra CMS HTTP Header Injection Vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. An HTTP header injection vulnerability exists in the 'cfg' parameter of the...
CVE-2018-16979
Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943...
Design/Logic Flaw
Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943...
