1113 matches found
CVE-2024-32288
Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function...
CVE-2024-30639
Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability in the page parameter of fromAddressNat function...
CVE-2024-23177
An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...
CVE-2024-3428
A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...
CVE-2024-30592
Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability in the page parameter of the fromAddressNat function...
CVE-2024-37859
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...
CVE-2024-32291
Tenda W30E v1.0 firmware v1.0.1.25633 has a stack overflow vulnerability via the page parameter in the fromNatlimit function...
CVE-2024-10048
The Post Status Notifier Lite and Premium plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.11.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2024-12156
The AI Content Writer, RSS Feed to Post, Autoblogging SEO Help plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2024-25373
Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub49B384 function...
CVE-2023-31705
A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter...
CVE-2023-37716
Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting...
CVE-2023-37723
Tenda F1202 V1.0BRV1.2.0.20408, FH1202V1.2.0.19EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting...
CVE-2023-37721
Tenda F1202 V1.0BRV1.2.0.20408, FH1202V1.2.0.19EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter...
CVE-2023-24202
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...
CVE-2023-2272
The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-24195
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...
CVE-2023-2152
A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched...
CVE-2023-1805
The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...