D-Link Di-7200G Buffer Error Vulnerability

The D-Link Di-7200G is a Gigabit enterprise router from China-based AUO D-Link. A security vulnerability exists in the D-Link DI-7000G, which originates from a stack overflow that can be caused by manipulating the prev parameter in the H5/login.cgi function...

CVE-2023-43199: Out-of-bounds Write

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function...

CVE-2023-43199

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function...

PT-2023-5326 · D Link · Di-7200Gv2.E1

Name of the Vulnerable Software and Affected Versions: D-Link device DI-7200GV2.E1 version 21.04.09E1 Description: The issue is related to a stack overflow in the H5/login.cgi function, specifically via the prev parameter. This can be exploited by a remote attacker to cause a denial of service...

SUSE CVE-2004-1059

Multiple cross-site scripting XSS vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 next and 2 prev result search pages, and the 3 extended and 4 simple search forms...

znamost.cz XSS vulnerability

Open Bug Bounty ID: OBB-664443 Description| Value ---|--- Affected Website:| znamost.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sql injection

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a addpostit.php b delete.php, and c modprestdate.php; and the 2 prev parameter to d prestdetail.php...

CVE-2008-4757: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a addpostit.php b delete.php, and c modprestdate.php; and the 2 prev parameter to d prestdetail.php...

CVE-2006-1336: Undefined Security Weakness

Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 year, 2 month, 3 next, and 4 prev parameters...