CVE-2023-31705

A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter...

PT-2023-9044 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Description: A stack overflow issue was discovered in the fromSafeUrlFilter function, related to the page parameter. This could allow a remote attacker to impact the...

CVE-2023-31705

A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter...

Tenda FH1203 page parameter stack buffer overflow vulnerability

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the page parameter of the fromAddressNat method failing to properly validate the length o...

CVE-2023-37707

Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function...

CVE-2023-37705

Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromAddressNat function...

CVE-2023-37712

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20408, and FH1202 V1.2.0.20408 were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function...

CVE-2023-37707

Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function...

Stack overflow

Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function...

Stack overflow

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20408, and FH1202 V1.2.0.20408 were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function...

Tenda AC1206 缓冲区错误漏洞

The Tenda AC1206 is a Wireless King Gigabit Router from Tenda, China. A security vulnerability exists in the Tenda AC1206 version V15.03.06.23, which is caused by a buffer overflow in the page parameter of the fromSetIpBind method...

PT-2023-4220 · Tenda · Tenda Fh1202 +1

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Tenda F1202 version 1.2.0.20408 Tenda FH1202 version 1.2.0.20408 Description: The issue is related to a stack overflow in the page parameter in the fromSetIpBind function, which can allow a remote attacker to...

PT-2023-26081 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: A stack overflow issue was discovered via the page parameter in the fromAddressNat function. Recommendations: For Tenda FH1203 version 2.0.1.6, consider restricting access to the fromAddressNat functi...

PT-2023-25225 · Unknown · Gz Scripts Php Vacation Rental Script

Name of the Vulnerable Software and Affected Versions: GZ Scripts PHP Vacation Rental Script version 1.8 Description: A problematic issue has been found, affecting an unknown part of the file /preview.php. The manipulation of the page, layout, sort by, and property id arguments leads to cross-sit...

PT-2023-24196 · Unknown · Sourcecodester Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Resort Management System version 1.0 Description: A vulnerability was found in the system, declared as problematic, affecting an unknown functionality. The manipulation of the page argument leads to cross-site scripting. The...

GHSA-P2FC-XXR8-FW3P Liferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module

Cross-site request forgery CSRF vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console via the...

CVE-2023-2362

The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder WordPress plugin before 1.5.1, Counter Box WordPress plugin before 1.2.2, Floating Button WordPress plugin before 5.3.1, Herd Effects WordPre...

Multiple Plugins from Wow-Company - Reflected XSS

The plugins do not escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC Make a logged in admin open a page with the code below The XSS will be triggered when pressing...

PT-2023-20768 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A vulnerability has been found in the system, classified as problematic, affecting an unknown functionality of the file admin/. The manipulation of the page argument...

CVE-2023-1805

The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...