33 matches found
CVE-2023-40894
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg...
CVE-2023-37787
Multiple cross-site scripting XSS vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of /admin/router.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of /admin/router.php...
Server-Side Request Forgery (SSRF)
rsshub is vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists due to unsafe route parameter sanitation, which allows an attacker to send arbitrary HTTP requests from the server to other servers...
WordPress plugin Order Listener for WooCommerce SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. SQL injection vulnerability exists in versions prior to WordPress Order Listener for WooCommerce plugin...
CVE-2020-23718
Cross site scripting XSS vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php...
CVE-2020-23718
Cross site scripting XSS vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php...
xujinliang zibbs 跨站脚本漏洞
Zibbs Zibbs Forum is a Bootstrap-based Php light forum system. xujinliang zibbs version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of the route parameter in index.php. An attacker could use this vulnerability to execute...
CVE-2021-27129
CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...
PT-2021-17253
Name of the Vulnerable Software and Affected Versions: CASAP Automated Enrollment System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited through the ROUTE parameter, which is accessible via the Students Edit path...
CASAP Automated Enrollment 跨站脚本漏洞
CASAP Automated Enrollment is an automated enrollment system organized by CASAP USA. The purpose of the project is to provide an automated enrollment system for CASAP to streamline the process for schools and make it more effective, efficient and easily retrievable. A cross-site scripting...
Open Redirect
getgrav/grav is vulnerable to open redirect. The vulnerability exists because the function redirect in Common/Grav.php does not validate the internal route parameter route and redirect to another location, allowing attackers to provide a malicious route to a location or file...
