2 matches found
CVE-2017-16902
Vonage VDV-23 115 devices running firmware 3.2.11-0.9.40 are affected by CVE-2017-16902. A long string in loginUsername or loginPassword sent to goform/login can trigger a crash and router reboot, effectively a denial-of-service. CNVD-2017-37697 corroborates the reboot via a long login field; 133...
CVE-2005-3423
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter or 2 cookies to a subdreamer.php, b ipb2.php, c phpbb2.php, d vbulletin2.php, and e vbulletin3.php...