PT-2026-96037

Name of the Vulnerable Software and Affected Versions Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656 Description A remote command injection flaw exists in the /send order.cgi endpoint. The issue occurs when the mac argument is manipulated, allowing an attacker to execute...

PT-2026-96038

Name of the Vulnerable Software and Affected Versions Chengdu Feiyuxing Technology Feiyu Star Router version B-MB5E202-210322-r11656 Description An issue exists in the Cookie Handler component where improper handling of the session id variable in the '/send order.cgi' endpoint allows for remote...

PT-2025-48404

Name of the Vulnerable Software and Affected Versions ADSLR NBR1005GPEV2 version 250814-r037c Description A flaw exists in ADSLR NBR1005GPEV2 250814-r037c that allows for command injection. This issue is located within the set mesh disconnect function of the /send order.cgi file. Manipulation of...

fountainsbydesign.com XSS vulnerability

Vulnerable URL: http://www.fountainsbydesign.com/order.cgi?item='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4885155 VIP website status:| No Check fountainsbydesign.com SSL...

banner-netmarketing.de XSS vulnerability

Vulnerable URL: http://www.banner-netmarketing.de/cgi-bin/system/order.cgi?mail=besucher=1=%3C%25to%25%3E=Wrestling:152=10000======∩=50=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...