EUVD-2018-9721

Malware in sbrugna...

CVE-2018-17981

Lifesize Express ls ex24.7.10 2000 14 devices allow XSS via the interface/interface.php brand parameter...

Smarts Smart Agent interface.php Page SQL Injection Vulnerability

Smarts Smart Agent is a powerful, flexible and scalable tool from Smarts for monitoring wireless network performance and services from the end user's perspective. An SQL injection vulnerability exists in Smarts Smart Agent v1.1.0, which stems from a lack of validation of externally entered SQL...

CVE-2024-50713

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php...

CVE-2024-50713: Improper Neutralization of Special Elements used in an SQL Command

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php...

CVE-2024-50713

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php...

CVE-2022-4933

A vulnerability, which was classified as critical, has been found in ATM Consulting dolibarrmodulequicksupplierprice up to 1.1.6. Affected by this issue is the function upatePrice of the file script/interface.php. The manipulation leads to sql injection. The attack may be launched remotely...

CVE-2022-4933: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in ATM Consulting dolibarrmodulequicksupplierprice up to 1.1.6. Affected by this issue is the function upatePrice of the file script/interface.php. The manipulation leads to sql injection. The attack may be launched remotely...

CVE-2018-17981

Lifesize Express ls ex24.7.10 2000 14 devices allow XSS via the interface/interface.php brand parameter...

Design/Logic Flaw

Lifesize Express ls ex24.7.10 2000 14 devices allow XSS via the interface/interface.php brand parameter...

CVE-2018-17981

Lifesize Express ls ex24.7.10 2000 14 devices allow XSS via the interface/interface.php brand parameter...

PT-2020-8630

Name of the Vulnerable Software and Affected Versions: Lifesize Express ls ex2 version 4.7.10 Description: The issue allows for XSS via the brand parameter in the "interface/interface.php" endpoint. This affects approximately 2000 devices. Recommendations: For version 4.7.10, avoid using the bran...

CVE-2018-17981: Improper Neutralization of Input During Web Page Generation

Lifesize Express ls ex24.7.10 2000 14 devices allow XSS via the interface/interface.php brand parameter...

PT-2019-10095

Name of the Vulnerable Software and Affected Versions: Allied Telesis 8100L/8 devices affected versions not specified Description: The issue allows for cross-site scripting XSS attacks. This is possible due to the lack of proper input validation in the vlanid or subnet mask parameters within the...

CVE-2018-9034

CVE-2018-9034 affects the WordPress Relevanssi plugin, specifically version 4.0.4 (and possibly earlier). The vulnerability is a Reflected XSS in lib/interface.php where the GET parameter tab is read and echoed into HTML without proper escaping, allowing an attacker to inject arbitrary JavaScript...

PT-2018-18796

Name of the Vulnerable Software and Affected Versions Relevanssi plugin version 4.0.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary JavaScript or HTML. This is achieved via the tab GET parameter in the lib/interface.php file. Recommendations Fo...

CVE-2018-9034: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...

CVE-2017-14118

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the hostlist parameter to module/toolall/selecttool.php...

CVE-2017-14118: Improper Neutralization of Special Elements used in an OS Command

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the hostlist parameter to module/toolall/selecttool.php...

CVE-2006-6611: Undefined Security Weakness

PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...