Lucene search
+L

1126 matches found

Positive Technologies
Positive Technologies
added 2022/06/29 12:00 a.m.10 views

PT-2022-6755 · Tenda · Tenda Fh1202 +5

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Tenda AC10 version V1.0 Tenda AC1206 version V1.0 Tenda AC7 version V1.0 Tenda AC5 version V1.0 Tenda AC9 version V3.0 Description: The issue is related to a stack...

9.8CVSS9.7AI score0.00928EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2022/06/29 12:00 a.m.10 views

PT-2022-6754 · Tenda · Tenda Fh1202 +5

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Tenda AC10 version V1.0 Tenda AC1206 version V1.0 Tenda AC7 version V1.0 Tenda AC5 version V1.0 Tenda AC9 version V3.0 Description: The issue is related to a stack...

9.8CVSS9.7AI score0.00928EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2022/06/29 12:00 a.m.12 views

PT-2022-6756 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Description: The issue is related to a stack overflow in the fromSafeClientFilter function when handling the page parameter. This can be exploited by a remote attacker ...

9.8CVSS9.5AI score0.00928EPSS
SaveExploits1References6
OSV
OSV
added 2022/06/24 5:15 p.m.10 views

CVE-2021-39408

Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...

6.1CVSS5.8AI score0.01313EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/24 5:15 p.m.8 views

CVE-2021-39408

Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...

6.1CVSS6.4AI score0.01313EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/14 4:15 p.m.13 views

CVE-2022-32340

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/viewpatient&id=...

7.2CVSS7.1AI score0.00956EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/14 12:00 a.m.13 views

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from /psrs/admin/categories/managefieldorder. php?id=page has a SQL injection issue. No detailed vulnerability details...

7.2CVSS5.7AI score0.01058EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/13 1:15 p.m.9 views

CVE-2022-1532

Themify WordPress plugin before 1.3.8 does not sanitise and escape the page parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score0.00849EPSS
SaveExploits2References1
NVD
NVD
added 2022/06/13 1:15 p.m.32 views

CVE-2022-1532

Themify WordPress plugin before 1.3.8 does not sanitise and escape the page parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.00849EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/06/13 1:15 p.m.10 views

CVE-2022-1532

Themify WordPress plugin before 1.3.8 does not sanitise and escape the page parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.5AI score0.00849EPSS
SaveExploits2References2
OSV
OSV
added 2022/06/02 2:15 p.m.10 views

CVE-2022-30809

elitecms 1.01 is vulnerable to SQL Injection via /admin/editpage.php?page=...

9.8CVSS7.4AI score0.01137EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.4 views

CVE-2022-29628

A cross-site scripting XSS vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter...

5.4CVSS6AI score0.00501EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/02 2:15 p.m.12 views

CVE-2022-29628

A cross-site scripting XSS vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter...

5.4CVSS6.2AI score0.00501EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.11 views

Online Market Place Site 跨站脚本漏洞

Online Market Place Site is an online marketplace site. v1.0 of Online Market Place Site is vulnerable to a cross-site scripting vulnerability in which the Page parameter in the source/omps/seller lacks a checksum filter for user-supplied data and output data. An attacker could use the...

5.4CVSS5.6AI score0.00501EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/14 3:15 a.m.20 views

GHSA-CVVX-R33M-V7PQ Improper Input Validation in Apache Struts

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

7.5CVSS7.2AI score0.21261EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2022/05/12 4:15 p.m.5 views

CVE-2022-29306

IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the idpage parameter in application/models/articlemodel.php...

9.8CVSS5.9AI score0.01107EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/11 2:15 p.m.12 views

CVE-2022-28078

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Admin panel via the $GET'page' parameter...

6.1CVSS6.3AI score0.01095EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/11 2:15 p.m.9 views

CVE-2022-28078

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Admin panel via the $GET'page' parameter...

6.1CVSS5.8AI score0.01095EPSS
SaveExploits1References3
Prion
Prion
added 2022/05/11 2:15 p.m.28 views

Cross site scripting

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Admin panel via the $GET'page' parameter...

4.3CVSS6AI score0.01095EPSS
SaveExploits1References2Affected Software1
GithubExploit
GithubExploit
added 2022/05/11 6:28 a.m.16 views

Exploit for Cross-site Scripting in Home_Owners_Collection_Management_System_Project Home_Owners_Collection_Management_System

CVE-2022-28077 Home Owners Collection Management System 1.0 -...

6.1CVSS6.5AI score0.01095EPSS
SaveExploits2
Rows per page
Query Builder