Lucene search
K

10 matches found

Positive Technologies
Positive Technologies
added 2025/08/30 12:0 a.m.2 views

PT-2025-35377

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Book Store version 1.0 Description: A SQL injection issue exists due to the manipulation of the pubid parameter when processing the /publisher list.php file. This allows for remote attacks. The exploit has been published...

7.5CVSS7.4AI score0.00383EPSS
Exploits1References11
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.6 views

The vulnerability of the imei_filter parameter in the device_list.php file of the monitoring software for Advantech R-SeeNet’s router functions allows a hacker to disclose protected information.

The vulnerability of the imeifilter parameter in the devicelist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

6.8CVSS7AI score0.01144EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.5 views

The vulnerability of the “health_alt_filter” parameter in the monitoring software for the Advantech R-SeeNet router’s status and functions allows a hacker to disclose protected information.

The vulnerability of the “healthaltfilter” parameter in the Advantech R-SeeNet monitoring software’s devicelist.php file relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

6.8CVSS7.3AI score0.0138EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.7 views

The vulnerability of the surname_filter parameter in the user_list.php script of the Advantech R-SeeNet monitoring software allows a hacker to disclose protected information.

The vulnerability of the surnamefilter parameter in the userlist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

6.8CVSS6.6AI score0.01134EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.7 views

The vulnerability of the name_filter parameter in the user_list.php script of the monitoring software for the Advantech R-SeeNet router’s status and functions allows a intruder to disclose protected information.

The vulnerability of the namefilter parameter in the userlist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially create...

6.8CVSS6.6AI score0.01134EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.8 views

The vulnerability of the username_filter parameter in the user_list.php script of the Advantech R-SeeNet monitoring software allows a hacker to disclose protected information.

The vulnerability of the usernamefilter parameter in the userlist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

6.8CVSS7AI score0.01144EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2015/10/13 12:0 a.m.3 views

phpRechnung SQL Injection Vulnerability

phpRechnung is a web-based accounting software. A SQL injection vulnerability exists in the list.php script in versions prior to phpRechnung 1.6.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

6.5CVSS8.4AI score0.01061EPSS
Exploits0References1
Exploit DB
Exploit DB
added 2009/07/20 12:0 a.m.25 views

Proxy List Script - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43489/info Proxy List Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2009/07/20 12:0 a.m.6 views

Proxy List Script - index.php Cross-Site Scripting

Proxy List Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43489/info Proxy List Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...

6.8AI score
Exploits0
NVD
NVD
added 2001/02/12 5:0 a.m.12 views

CVE-2001-0100

bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...

10CVSS7.6AI score0.15605EPSS
Exploits1References3
Rows per page
Query Builder