CVE-2026-71921

Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filtering of the pass field before command execution. A remote attacker can trigger this vulnerability via crafted input to...

EUVD-2026-64980

Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filtering of the pass field before command execution. A remote attacker can trigger this vulnerability via crafted input to...

CVE-2026-71921 DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi

Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filtering of the pass field before command execution. A remote attacker can trigger this vulnerability via crafted input to...

CVE-2026-71921

DrayTek VigorSwitch multiple models are affected by a pre-authentication OS command injection vulnerability in the setget.cgi interface. The root cause is insufficient filtering of the pass field before it is passed to command execution, allowing a remote unauthenticated attacker to execute arbit...

CVE-2026-71921 DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi

Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filtering of the pass field before command execution. A remote attacker can trigger this vulnerability via crafted input to...

PT-2026-80955

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A pre-authentication command injection issue exists in the 'setget.cgi' interface. The flaw stems from insufficient filtering of the pass field before command execution, allowing ...

PT-2025-44175

Name of the Vulnerable Software and Affected Versions IPFire versions prior to 2.29 Core Update 198 Description IPFire versions prior to 2.29 Core Update 198 are susceptible to a stored cross-site scripting XSS issue. An authenticated attacker can inject arbitrary JavaScript code through the txt...

CVE-2008-5926

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

CVE-2007-4762: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 pass fields, different vectors than CVE-2007-0092...

CVE-2007-4119: Undefined Security Weakness

Multiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 Pass fields...

CVE-2006-5628: Undefined Security Weakness

SQL injection vulnerability in login.asp in UNISOR Content Management System CMS allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 pass fields...