1113 matches found
CVE-2022-45520
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/qossetting...
CVE-2022-45513
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter...
CVE-2022-45517
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer...
CVE-2022-45516
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting...
CVE-2022-43015
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...
CVE-2022-1532
Themify WordPress plugin before 1.3.8 does not sanitise and escape the page parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...
CVE-2022-37803
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat...
CVE-2022-45514
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter...
CVE-2022-45518
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...
CVE-2022-45523
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/L7Im...
CVE-2020-8887
Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...
CVE-2012-6608
Cross-site scripting XSS vulnerability in xmlservices/Ebook.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter...
CVE-2015-9468
The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...
CVE-2010-2318
Cross-site scripting XSS vulnerability in cmsdata.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2015-9452
The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nexformsId parameter...
CVE-2006-0463
Cross-site scripting XSS vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script or HTML via the 1 gotoid parameter to index.php or 2 page parameter to newsfull.php...
CVE-2002-1966
Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...
CodeAstro Membership Management System 注入漏洞
CodeAstro Membership Management System is a membership management system from CodeAstro. An injection vulnerability exists in CodeAstro Membership Management System version 1.0, which is caused by SQL injection due to the operation of the parameter ID in the file renew.php?id=6...
CVE-2025-2868
Reflected Cross-Site Scripting XSS vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the page parameter in /index.php...