4 matches found
WAVLINK WN579 X3 messages.txt Access Control Error Vulnerability
WAVLINK WN579 X3, a wireless router from WAVLINK China, is vulnerable to an access control error in WAVLINK WN579 X3 M79X3.V5030.191012. The vulnerability is caused by the failure to set reasonable access rights to the messages.txt file, which can be exploited to obtain critical information by...
CVE-2022-34570
WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the key information via accessing the messages.txt page...
Code injection
Static code injection vulnerability in Sanus|artificium aka Sanusart Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is...
CVE-2008-6934
Static code injection vulnerability in Sanus|artificium aka Sanusart Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is...