278 matches found
Cross site scripting
Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting XSS vulnerability via the Usr parameter at resellercenter/login.asp...
CVE-2024-24130
Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting XSS vulnerability via the Usr parameter at resellercenter/login.asp...
CVE-2024-24130: Improper Neutralization of Input During Web Page Generation
Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting XSS vulnerability via the Usr parameter at resellercenter/login.asp...
CVE-2024-24130
Mail2World v12 Business Control Center has a reflected XSS in resellercenter/login.asp via the Usr parameter. Root cause: reflected input is echoed into the page. Impact per sources: confidentiality and integrity may be low; no availability impact reported. Exploitation details are not provided i...
PT-2023-8216 · Zyxel · Zyxel Pmg2005-T20B
Name of the Vulnerable Software and Affected Versions: ZyXel PMG2005-T20B firmware version V1.00ABNK.2b11 C0 Description: The issue is related to a buffer overflow vulnerability in the cgi-bin/login.asp component of the ZyXel PMG2005-T20B firmware. This vulnerability can be exploited by a remote...
CVE-2022-35192: Buffer Copy without Checking Size of Input
D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service DoS via the User parameter or Pwd parameter to Login.asp...
CVE-2022-35192
D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service DoS via the User parameter or Pwd parameter to Login.asp...
D-Link AC1200 安全漏洞
The D-Link AC1200 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 version, which originates from a vulnerability that could allow an unauthenticated attacker to cause a denial of servic...
CVE-2020-7983
CVE-2020-7983 affects CommScope Ruckus ZoneFlex R500 devices running 3.4.2.0.384. The vulnerability is a CSRF in login.asp that could allow remote attackers to access the administrative panel and potentially perform SSRF attacks. Affected component is the login page (login.asp); root cause detail...
CVE-2020-8830: Cross-Site Request Forgery (CSRF)
CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen...
CVE-2020-7983: Cross-Site Request Forgery (CSRF)
A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks...
CVE-2018-18775
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product...
CVE-2018-18775
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product...
CVE-2018-18775
Microstrategy Web, version 7 , is vulnerable to Cross-Site Scripting (XSS) due to insufficient encoding of user-controlled inputs. The vulnerability specifically affects the Login.asp Msg parameter . Successful exploitation could allow an attacker to execute arbitrary scripts in the victim's brow...
CVE-2018-18775: Improper Neutralization of Input During Web Page Generation
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product...
sistemas.anac.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-633902 Description| Value ---|--- Affected Website:| sistemas.anac.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sistemas.anac.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-621168 Description| Value ---|--- Affected Website:| sistemas.anac.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
perfumenani12.com XSS vulnerability
Open Bug Bounty ID: OBB-620194 Description| Value ---|--- Affected Website:| perfumenani12.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...