UBUNTU-CVE-2024-29374

A Cross-Site Scripting XSS vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter...

WordPress Plugin File Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

The vulnerability of the setLanguageCfg() function (/cgi-bin/cstecgi.cgi) in the Totolink LR1200GB router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the setLanguageCfg function /cgi-bin/cstecgi.cgi of the Totolink LR1200GB router software lies in the fact that the operation is carried out outside the buffer in memory when processing the lang parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

Elite CRM Cross-Site Scripting Vulnerability

Elite CRM is a customer relationship management system. A cross-site scripting vulnerability exists in Elite CRM v1.2.11, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary code via the langua...

PT-2024-1172 · Totolink · Totolink Lr1200Gb

Name of the Vulnerable Software and Affected Versions: Totolink LR1200GB version 9.1.0u.6619 B20230130 Description: A critical issue affects the setLanguageCfg function of the /cgi-bin/cstecgi.cgi file, where the manipulation of the lang argument leads to a stack-based buffer overflow. This can b...

SEMCMS SQL Injection Vulnerability (CNVD-2024-06232)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS v4.8, which originates from the lack of validation of externally entered SQL statements via the languageID parameter in /webinc.php. The vulnerability can b...

CVE-2022-40361

Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint...

Cross site scripting

Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint...

Elite CRM 跨站脚本漏洞

Elite CRM is a customer relationship management system. A cross-site scripting vulnerability exists in Elite CRM v1.2.11, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary code via the langua...

VulnCheck KEV: CVE-2020-11546

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to execute arbitrary PHP code via Code Injection...

PT-2023-24384 · Ocomon · Ocomon

Name of the Vulnerable Software and Affected Versions: OcoMon versions prior to 4.0.1 Description: A local file inclusion issue via the lang parameter allows attackers to execute arbitrary code by supplying a crafted PHP file. This can be achieved by exploiting the vulnerability in the lang...

TOTOLINK X5000R setLanguageCfg Function Code Execution Vulnerability

TOTOLINK X5000R is a wireless router from TOTOLINK that supports Wi-Fi 6 technology with full coverage Mesh system and dual band transmission. The TOTOLINK X5000R suffers from a code execution vulnerability that stems from the lang parameter of the setLanguageCfg function failing to properly filt...

CVE-2023-39617

TOTOLINK X5000RV9.1.0cu.2089B20211224 and X5000RV9.1.0cu.2350B20230313 were discovered to contain a remote code execution RCE vulnerability via the lang parameter in the setLanguageCfg function...

CVE-2023-39617

TOTOLINK X5000RV9.1.0cu.2089B20211224 and X5000RV9.1.0cu.2350B20230313 were discovered to contain a remote code execution RCE vulnerability via the lang parameter in the setLanguageCfg function...

PT-2023-27035 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R versions V9.1.0cu.2089 B20211224 through V9.1.0cu.2350 B20230313 Description: A remote code execution issue was discovered, allowing exploitation via the lang parameter in the setLanguageCfg function. This enables unauthorized...

CVE-2023-37170

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain an unauthenticated remote code execution RCE vulnerability via the lang parameter in the setLanguageCfg function...

CVE-2023-27076

Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter...

CVE-2023-27076

Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter...

Tenda G103 操作系统命令注入漏洞

The Tenda G103 is a GPON fiber access device designed for home and SOHO users from Tenda. An operating system command injection vulnerability exists in Tenda G103 v.1.0.0.5, which can be exploited to execute arbitrary code via the language parameter...

CVE-2023-27076

Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter...