40 matches found
CVE-2024-8693 Kaon CG3000 dhcpcd Command cross site scripting
A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipulation of the argument -h with the input alert'XSS' leads to cross site scripting. The attack may be...
CVE-2024-8693 Kaon CG3000 dhcpcd Command cross site scripting
A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipulation of the argument -h with the input alert'XSS' leads to cross site scripting. The attack may be...
CVE-2024-8693
CVE-2024-8693 affects Kaon CG3000 1.01.43: the dhcpcd Command Handler’s -h argument can be manipulated to trigger cross-site scripting. The vulnerability enables remote exploitation and the public disclosure of the exploit is noted. Multiple sources (NVD/Red Hat listing, PT Security, CN) confirm ...
PT-2024-39180 · Kaon · Kaon Cg3000
Name of the Vulnerable Software and Affected Versions: Kaon CG3000 version 1.01.43 Description: A problematic issue has been found in the dhcpcd Command Handler component, allowing for cross-site scripting through the manipulation of the argument -h with malicious input, such as alert'XSS'. This...
CLARO KAON CG3000 跨站脚本漏洞
CLARO KAON CG3000 is a router from the Brazilian company CLARO. A cross-site scripting vulnerability exists in CLARO KAON CG3000 version 1.01.43, which stems from the parameter -h of the component dhcpcd Command Handler can lead to cross-site scripting attacks...
CVE-2024-3659
Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...
CVE-2024-3659
Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...
CVE-2024-3659 Command injection in KAON AR2140 routers
Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...
CVE-2024-3659 Command injection in KAON AR2140 routers
Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...
CVE-2024-3659
CVE-2024-3659 affects KAON AR2140 routers. Firmware versions prior to 3.2.50 and 4.2.16 are vulnerable to a shell command injection via a crafted request to specific endpoints. Exploitation requires access to the device’s administrative portal. Remediation: upgrade to 3.2.50+ or 4.2.16+ (per vend...
PT-2024-27087 · Kaon · Kaon Ar2140
Name of the Vulnerable Software and Affected Versions: KAON AR2140 routers versions prior to 4.2.16 Description: The issue is related to a shell command injection vulnerability. It can be exploited by sending a crafted request to one of the endpoints, but access to the administrative portal of th...
KAON AR2140 安全漏洞
The KAON AR2140 is a wireless router from KAON. A security vulnerability exists in the KAON AR2140 version 4.2.16 and prior versions, which stems from the router firmware being susceptible to shell command injection attacks...
CVE-2021-43483
An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...
CVE-2021-43483
An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...
CVE-2021-43483
An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...
Authentication flaw
An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...
CVE-2021-43483
An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication...
CVE-2021-43483
CVE-2021-43483 affects CLARO KAON CG3000 (version 1.00.67). The vulnerability is an access control flaw in router configuration that could allow an unauthenticated attacker to read or update configuration data. Connected sources consistently describe this issue as an authentication/authorization ...
CLARO KAON CG3000 访问控制错误漏洞
The CLARO KAON CG3000 is a router from the Brazilian company CLARO. An access control error vulnerability exists in the CLARO KAON CG3000 version 1.00.67. The vulnerability allows an attacker to read or update the configuration without authentication...
Mega Mall [ multiples injection sql & full path disclosure ]
vendor site: http://products.kaonsoftwares.com/ product: mega-mall bug:injection sql & full path disclosure language: asp risk: high injection sql get: http://site.com/mega-mall/productreview.php?t=sql http://site.com/mega-mall/productreview.php?t=0&productId=sql...