CVE-2019-17557

It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage parameters. By this mean, a user accessing the Enduser UI could execute javascript code from URL query string...

CVE-2019-12520

A flaw was found in squid. The absolute URL of a request can include the decoded UserInfo username and password for certain protocols. This decoded info may contain special characters to delimit the domain, and treat the rest of the URL as a path or query string. An attacker could first make a...

Open redirect

Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string...

python: CRLF injection via the query part of the url passed to urlopen()

An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the query string after a ? charact...

CVE-2020-8823

A cross-site scripting XSS vulnerability was found in the Node.js library, sockjs. An attacker could use this vulnerability to supply a query string with script tags, which could trick a victim into executing a specially crafted JavaScript code...

Com_hdwplayer Search.php SQL Injection Vulnerability

Developed with PHP language and MySQL database, Joomla! is a content management system. Joomla! Comhdwplayer Search.php suffers from a SQL injection vulnerability, which can be exploited by an attacker to eventually trick the server into executing malicious SQL commands by inserting SQL commands...

PHP-FPM Remote Code Execution Vulnerability (CNVD-2020-25851)

PHP-FPM is a PHP FastCGI process manager. A remote code execution vulnerability exists in PHP-FPM. An attacker can execute code via query string parameters...

Authentication flaw

Barracuda Web Application Firewall WAF 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string...

PT-2020-7627

Name of the Vulnerable Software and Affected Versions Barracuda Web Application Firewall WAF version 7.8.1.013 Description The issue allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string. Recommendations For Barracuda Web...

CVE-2014-2595: Insufficient Session Expiration

Barracuda Web Application Firewall WAF 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string...

PT-2020-7367

Name of the Vulnerable Software and Affected Versions: QuiXplorer versions prior to 2.5.5 Description: The issue allows remote attackers to inject arbitrary web script or HTML via several parameters to index.php, including the dir, item, order, searchitem, selitems, or srt parameter, as well as t...

CVE-2004-2776

go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 query string or 2 artarchive parameter...

CVE-2004-2776: Undefined Security Weakness

go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 query string or 2 artarchive parameter...

CVE-2019-16977

CVE-2019-16977 affects FusionPBX

PT-2019-14897

Name of the Vulnerable Software and Affected Versions FusionPBX versions prior to 4.5.8 Description The issue concerns the use of an unsanitized query string variable in the file appextensionsextension imports.php, which is reflected in HTML. This leads to a cross-site scripting XSS issue, allowi...

PT-2019-14896

Name of the Vulnerable Software and Affected Versions FusionPBX versions up to 4.5.7 Description The issue concerns the use of an unsanitized query string variable in the file appdestinationsdestination imports.php, which is reflected in HTML and leads to a cross-site scripting XSS issue...

CVE-2019-16973

In FusionPBX up to 4.5.7, the file app\contacts\contactedit.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...

PT-2019-14893 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX versions up to 4.5.7 Description: The issue concerns the use of an unsanitized query string variable in the file appcontactscontact edit.php, which is reflected in HTML and leads to a cross-site scripting XSS issue. This occurs when...

CVE-2019-16987

In FusionPBX up to v4.5.7, the file app\contacts\contactimport.php uses an unsanitized "querystring" variable coming from the URL, which is reflected in HTML, leading to XSS...

PT-2019-14908 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.8 Description: The issue concerns the use of an unsanitized query string variable in the contact import.php file, which is reflected in HTML. This leads to a cross-site scripting XSS issue, allowing potential...