1113 matches found
PT-2020-6504 · D Link · D-Link Dap-2020
Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: The issue is related to a stack-based buffer overflow when handling the var:page parameter provided to the "webproc" endpoint. This occurs due to the lack of proper validation of the length of...
SQL injection vulnerability in the b*** parameter of the zzzphp sa***.php page
zzphp is a PHP and MYSQL based CMS, free open source building system. zzzphp sa.php page b parameters exist SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...
SQL injection vulnerability in the ge*** page po*** parameter of the UCLE Intelligent Education Cloud Platform
Mingbo Education Technology Co., Ltd. is a company that provides quality products, services and solutions for smart education in the field of primary and secondary schools K12. There is a SQL injection vulnerability in the ge page po parameter of the UCL Smart Education Cloud Platform, which can ...
SQL Injection Vulnerability in YU***_us*** Parameter of Yunye CMS in***.php Page
Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS in.php page YUus parameter there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
CVE-2019-18951
SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files...
SQL injection vulnerability in the pi***.asp page parameter of Enterprise First's website building system ma***.asp
Enterprise First website builder is a free website builder system provided by Enterprise First. SQL injection vulnerability exists in the ma.asp page pi parameter of the Enterprise First website building system, which can be exploited by an attacker to obtain sensitive information from the databa...
S-CMS e-commerce system aj***.php page st*** parameter has SQL injection vulnerability
S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page st parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
CVE-2016-10984
The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...
CVE-2016-10952
The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter...
CVE-2017-18613
The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter...
CVE-2017-18603
The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postmanemaillog page parameter...
CVE-2019-14789
The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter...
PT-2019-13834 · WordPress · Custom 404 Pro
Name of the Vulnerable Software and Affected Versions: Custom 404 Pro plugin version 3.2.8 Description: The issue concerns a problem with the Custom 404 Pro plugin for WordPress, where there is an XSS issue via the "page" parameter in the wp-admin/admin.php page. Recommendations: For Custom 404 P...
CVE-2018-19386
SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI...
Elite Graphix Elite CMS Pro SQL Injection Vulnerability
Elite Graphix Elite CMS Pro is a lightweight PHP and MySQL based content management system from Elite Graphix India. A SQL injection vulnerability exists in the '?page=' parameter of the /admin/addsidebar.php file in Elite Graphix Elite CMS Pro version 2.01, which stems from a lack of validation ...
CVE-2019-7687
cgi-bin/qcmapwebcgi on JioFi 4 jmr1140 AmtelJMR1140R12.07 devices has POST based reflected XSS via the Page parameter. No sanitization is performed for user input data...
CVE-2019-9593
A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2019-9576
The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS...