Teledyne FLIR AX8 Command Injection Vulnerability

Teledyne FLIR AX8 is a series of thermal surveillance cameras from Teledyne FLIR USA. The Teledyne FLIR AX8 suffers from a command injection vulnerability that stems from an arbitrary command execution vulnerability in the value parameter of the /usr/www/res.php page...

UBUNTU-CVE-2023-49006

Cross Site Request Forgery CSRF vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a crafted page in the XML.php file...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the phone parameter on the routers/details-router.php page...

CVE-2023-3556

A vulnerability was found in GZ Scripts Car Listing Script PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /preview.php. The manipulation of the argument page/sortby leads to cross site scripting. The attack can be initiated remotely. VDB-233350 i...

Directory traversal

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may allow a user to write a file to the webroot directory...

CVE-2022-37730

In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...

CVE-2022-37730

In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...

CVE-2022-37730

In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...

CVE-2022-37730: Cross-Site Request Forgery (CSRF)

In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...

Fujitsu ETERNUS CentricStor CS8000 操作系统命令注入漏洞

The Fujitsu ETERNUS CentricStor CS8000 is a unified backup and archiving platform from Fujitsu, Japan. for mainframe and open systems backup, archiving, secondary and object storage. A security vulnerability exists in Fujitsu ETERNUS CentricStor CS8000 version 8.1A SP02 P04, which can be injected...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getstudentsubject.php?index=The page lacks validation for external input SQL...

WordPress 插件 SQL注入漏洞

WordPress Plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in WordPress Plugin WordPress Membership SwiftCloud.io, which stems from the failure of the Get request ID parameter in the product /wp-admin/admin.php?page to properly check user input data...

Exploit for SQL Injection in Digitaldruid Hoteldruid

CVE 2021-37832 Hotel Druid 3.0.2 SQL Injection Vulnerability...

SQL Injection Vulnerability in si***.php Page of Qingdao Shangzhixin Network Technology Co.

Qingdao Business to Faith Network Technology Co., Ltd. was founded in March 2001, initially a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services, high-tech specialized companies, is one of the first batch of domestic Internet...

SQL injection vulnerability in co***.php page of website building system of Inner Mongolia Hohai Trading Co.

Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection vulnerability in the co.php page of the website building system of Inner Mongolia Hohai Trading Co. An attacker can u...

SQL injection vulnerability in ab***.php page of website building system of Inner Mongolia Hohai Trading Co.

Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection vulnerability in the ab.php page of the website building system of Inner Mongolia Hohai Trading Co. An attacker can u...

Stored cross-site scripting vulnerability in ZZCMS as***.php page

ZZCMS is a free website builder developed in asp language. A stored cross-site scripting vulnerability exists in the ZZCMS as.php page. An attacker can exploit the vulnerability to obtain a background administrator cookie...

SQL injection vulnerability in the si***.php page of the website building system of Shanghai Shilian Network Technology Development Co.

Shanghai Shilian Network Technology Development Co., Ltd. is a small and medium-sized enterprises to provide website construction services as the core, and supporting the provision of related enterprise information technology application services of professional network service providers. Shangha...

SQL injection vulnerability in n***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

SQL Injection Vulnerability in ne***.php Page of Website Building System of Jingteng Multimedia Co.

With the marketing planning and project manager system, Jingteng Multimedia Co., Ltd. analyzes customers' strengths and provides users with exclusive suggestions for website setup. A SQL injection vulnerability exists in the ne.php page of the website builder system of KING TENG MULTIMEDIA...