172 matches found
CVE-2023-0639
A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file getset.ccp of the component Web Management Interface. The manipulation of the argument nextPage leads to cross site scripting. The attack may be initiated...
CVE-2022-34973
D-Link DIR820LA1FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp...
CVE-2025-30367: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.6 in the nextPage parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access sensitive database information...
WeGIA SQL注入漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.6 that stems from an SQL injection in the nextPage parameter...
WeGIA 输入验证错误漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. An input validation error vulnerability exists in WeGIA 3.2.10 and earlier versions that stems from improper validation of the nextPage parameter, which allows an attacker to perform a phishing attack or...
PT-2025-5264 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions up to and including 3.2.10 Description: WeGIA is a Web manager for charitable institutions. An Open Redirect issue was identified in the control.php endpoint, allowing the nextPage parameter to be manipulated and redirecting...
CVE-2025-24020: URL Redirection to Untrusted Site
WeGIA is a Web manager for charitable institutions. An Open Redirect vulnerability was identified in the control.php endpoint of versions up to and including 3.2.10 of the WeGIA application. The vulnerability allows the nextPage parameter to be manipulated, redirecting authenticated users to...
CVE-2024-57035
WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php...
CVE-2024-57035
WeGIA v3.2.0 is vulnerable to SQL Injection via the nextPage parameter in /controle/control.php. The CVE records a high-severity issue (CVSS 3.1: 9.8) with network attack vector and no privileges/user interaction required. Remediation details are not provided in the supplied documents.
CVE-2024-57035
WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php...
CVE-2024-57035
WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php...
WeGIA SQL注入漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA version 3.2.0 that stems from vulnerability to SQL injection attacks via the nextPage parameter in /controle/control.php...
CVE-2024-57035: Improper Neutralization of Special Elements used in an SQL Command
WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php...
CVE-2023-32146: Stack-based Buffer Overflow
D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. T...
The vulnerability of the pingV4Msg component in D-Link DIR820LA1 router microprogramming software allows a hacker to induce a service failure.
The vulnerability of the pingV4Msg component in D-Link DIR820LA1 router microprogramming software is related to stack overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure through the nextPage parameter...
CVE-2023-25281
A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp...
CVE-2023-25281
A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp...
CVE-2023-25281: Out-of-bounds Write
A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp...
D-Link DIR820LA1 缓冲区错误漏洞
The D-Link DIR820LA1 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR820LA1FW105B03 version, which stems from the presence of a stack overflow vulnerability that can be exploited by an attacker to cause a denial of service via the nextPage parameter of...