418 matches found
PT-2018-14607
Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A heap-based buffer overflow issue exists in the router...
Command injection
An issue was discovered on Tenda AC9 V15.03.05.196318CN and AC10 V15.03.06.23CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection...
CVE-2018-16334: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on Tenda AC9 V15.03.05.196318CN and AC10 V15.03.06.23CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection...
PT-2018-13497
Name of the Vulnerable Software and Affected Versions Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Description An issue was discovered where the mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection. Recommendations For Tend...
CVE-2018-10329
app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter...
Cross site scripting
app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter...
CVE-2018-10329
app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter...
CVE-2018-10329
The CVE-2018-10329 entry concerns phpIPAM 1.3.1, where the file app/tools/mac-lookup/index.php is vulnerable to a Reflected XSS via the mac parameter in /tools/mac-lookup/. The connected Red Hat, NVD, OSV, and CVE records corroborate this description. What is affected: the phpIPAM web application...
CVE-2018-10329
app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter...
CVE-2018-10329: Improper Neutralization of Input During Web Page Generation
app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter...
PT-2018-9833
Name of the Vulnerable Software and Affected Versions: phpIPAM version 1.3.1 Description: The issue concerns a Reflected XSS in the /tools/mac-lookup/ endpoint via the mac parameter. This allows for potential malicious script injection and execution. Recommendations: For phpIPAM version 1.3.1,...
Design/Logic Flaw
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FWAIC1620W1.1.0-1220120709r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter...
CVE-2015-2280: Improper Neutralization of Special Elements used in an OS Command
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FWAIC1620W1.1.0-1220120709r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter...
PT-2017-6564
Name of the Vulnerable Software and Affected Versions AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera version FW AIC1620W 1.1.0-12 20120709 r1192.pck Description The issue allows remote authenticated users to execute arbitrary OS commands. This is achieved by injecting shell...
CVE-2014-5109
SQL injection vulnerability in maint/modules/endpointcfg/endpointgeneric.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action...
PT-2014-6286 · Fonality · Trixbox
Name of the Vulnerable Software and Affected Versions: Fonality trixbox affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the mac parameter in a Submit action within the maint/modules/endpointcfg/endpoi...
CVE-2014-5109: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in maint/modules/endpointcfg/endpointgeneric.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action...
