Rockwell Automation Bulletin 160 Preset 2.2 kW 230v AC Drive

Binary data 752242.prm...

Rockwell Automation Bulletin 160 Preset 3.7 kW 460v AC Drive

Binary data 752249.prm...

PT-2018-13526

Name of the Vulnerable Software and Affected Versions IdeaCMS versions through 2016-04-30 Description The issue is related to a reflected XSS that can be exploited via the kw parameter in the "index.php?c=content&a=search" endpoint. The product is discontinued. Recommendations For IdeaCMS version...

CVE-2018-16372: Improper Neutralization of Input During Web Page Generation

The issue was discovered in IdeaCMS through 2016-04-30. There is reflected XSS via the index.php?c=content&a=search kw parameter. NOTE: this product is discontinued...

kw-ic.com XSS vulnerability

Open Bug Bounty ID: OBB-639894 Description| Value ---|--- Affected Website:| kw-ic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerabilities of KW Multiprog and KW ProConOS in programming and debugging tools allow attackers to execute arbitrary commands.

The vulnerability of KW Multiprog and KW ProConOS programming and debugging tools is related to errors in managing registration data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the PLK configuration protocol...

NXFilter 3.0.3 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NXFILTER-XSS.txt Vendor: ================================ www.nxfilter.org/p2/ Product: ================================ NXFilter v3.0.3 Vulnerability Type: =========================...

NXFilter 3.0.3 - Multiple Cross-Site Scripting Vulnerabilities

NXFilter 3.0.3 - Multiple Cross-Site Scripting Vulnerabilities + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NXFILTER-XSS.txt Vendor: ================================ www.nxfilter.org/p2/ Product: ================================...

PT-2015-3273

Name of the Vulnerable Software and Affected Versions Arbiter 1094B GPS Substation Clock affected versions not specified KW Multiprog and KW ProConOS affected versions not specified Description The issue allows remote attackers to cause disruption or execute arbitrary commands. For the Arbiter...

CVE-2008-2915: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php aka the search module in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the 1 position or 2 kw parameter...

CVE-2008-2914: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jobseekers/JobSearch3.php aka the search module in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the 1 kw or 2 position parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-6597: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...

CVE-2006-5635: Undefined Security Weakness

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter...

CVE-2006-5635

CVE-2006-5635 is a SQL injection vulnerability affecting Web Wiz Forums, specifically in forum/search.asp where the KW parameter is not properly sanitized. The available connected documents confirm the issue allows remote attackers to manipulate the underlying database and potentially execute arb...

CVE-2006-5532: Undefined Security Weakness

Cross-site scripting XSS vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web script or HTML via the kw parameter. NOTE: some of these details are obtained from third party information...

KW Whois CGI whois Parameter Arbitrary Command Execution

The version of the KW whois CGI script installed on the remote web server fails to filter input to the 'whois' parameter of shell metacharacters. An unauthenticated, remote attacker can leverage this issue to execute arbitrary commands with the privileges of the http daemon. %NASLMINLEVEL 70300 C...

CVE-2000-0941

The CVE-2000-0941 entry concerns the KW Whois CGI script (KW Web) version 1.0, which fails to filter shell metacharacters in the 'whois' parameter. This allows an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the http daemon. The vulnerability is demonstrat...

CVE-2000-0941: Undefined Security Weakness

Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter...

Remote command execution via KW Whois 1.0

Greetings, There is a vulnerability in Kootenay Web Inc's KW Whois v1.0 which allows malicious users to execute commands as the uid/gid of the webserver. The hole lies in unchecked user input via an input form box. The form element input type=text name="whois" is not checked by the script for...