CVE-2021-28672

Xerox Phaser 6510 before 64.65.51 and 64.59.11 Bridge, WorkCentre 6515 before 65.65.51 and 65.59.11 Bridge, VersaLink B400 before 37.65.51 and 37.59.01 Bridge, B405 before 38.65.51 and 38.59.01 Bridge, B600/B610 before 32.65.51 and 32.59.01 Bridge, B605/B615 before 33.65.51 and 33.59.01 Bridge,...

Xerox Phaser 安全漏洞

The Xerox Phaser 6510 is a printer from the American company Xerox. It provides printing functionality. A security vulnerability exists in Xerox Phaser that allows remote attackers to execute arbitrary code via a buffer overflow in the processing of Web page parameters. The following products and...

CVE-2021-27526

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter...

DynPG 安全漏洞

DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "page" parameter...

PHPGurukul Online Book Store SQL注入漏洞

Online BookStore is an online bookstore program. There is a sql injection vulnerability in Online Book Store v1.0. The vulnerability is caused by the id parameter in detail.php not filtering special characters, and an attacker can execute arbitrary SQL statements through this vulnerability...

CVE-2021-22875

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

Hgiga MailSherlock SQL注入漏洞

HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. HGiga MailSherlock suffers from a SQL injection vulnerability. An attacker can use this vulnerability to inject and execute SQL commands in the URL parameters of a specific cgi page...

CVE-2020-29227

An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution...

PT-2020-17111 · Unknown · Car Rental Management System

Name of the Vulnerable Software and Affected Versions: Car Rental Management System version 1.0 Description: An issue was discovered in the Car Rental Management System where an unauthenticated user can perform a file inclusion attack against the "/index.php" file with a partial filename in the...

CVE-2020-8887

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...

Sql injection

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...

UBUNTU-CVE-2020-10946

Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...

Waychar enrollment system aj***.php page pa***_ne*** parameter has SQL injection vulnerability

Waychar Enrollment System is a PHP/MYSQL based enrollment system. A SQL injection vulnerability exists in the aj.php page pane parameter of Waychar enrollment system, which can be exploited by an attacker to obtain sensitive information from the database...

PT-2020-6504 · D Link · D-Link Dap-2020

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: The issue is related to a stack-based buffer overflow when handling the var:page parameter provided to the "webproc" endpoint. This occurs due to the lack of proper validation of the length of...

SQL injection vulnerability in the b*** parameter of the zzzphp sa***.php page

zzphp is a PHP and MYSQL based CMS, free open source building system. zzzphp sa.php page b parameters exist SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...

SQL injection vulnerability in the ge*** page po*** parameter of the UCLE Intelligent Education Cloud Platform

Mingbo Education Technology Co., Ltd. is a company that provides quality products, services and solutions for smart education in the field of primary and secondary schools K12. There is a SQL injection vulnerability in the ge page po parameter of the UCL Smart Education Cloud Platform, which can ...

SQL Injection Vulnerability in YU***_us*** Parameter of Yunye CMS in***.php Page

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS in.php page YUus parameter there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

CVE-2019-18951

SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files...

SQL injection vulnerability in the pi***.asp page parameter of Enterprise First's website building system ma***.asp

Enterprise First website builder is a free website builder system provided by Enterprise First. SQL injection vulnerability exists in the ma.asp page pi parameter of the Enterprise First website building system, which can be exploited by an attacker to obtain sensitive information from the databa...

S-CMS e-commerce system aj***.php page st*** parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page st parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...