100 matches found
VulnCheck KEV: CVE-2025-34054
An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgiquery. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence wa...
CVE-2018-19191
Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter...
Code injection
Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter...
CVE-2018-19191
Vulnerability (CVE-2018-19191): Webmin 1.890 is vulnerable to a cross-site scripting (XSS) flaw. The flaw allows an unauthenticated, remote attacker to trigger arbitrary script execution in a user’s browser by getting a user to click a specially crafted URL. Affected parameters include /config.cg...
CVE-2018-19191: Improper Neutralization of Input During Web Page Generation
Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter...
PT-2019-9756
Name of the Vulnerable Software and Affected Versions Webmin version 1.890 Description The issue concerns an XSS vulnerability. It can be exploited via several API endpoints, including "/config.cgi?webmin", the history parameter in "/shell/index.cgi", the "/shell/index.cgi?stripped=1" endpoint, o...
PT-2018-14368
Name of the Vulnerable Software and Affected Versions Virtualmin version 6.03 Description The issue allows for XSS via the query string. This can be demonstrated using the "webmin search.cgi" URI. Recommendations For Virtualmin version 6.03, update to a version that includes a fix for this issue...
meyerbos.com XSS vulnerability
Open Bug Bounty ID: OBB-671533 Description| Value ---|--- Affected Website:| meyerbos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
opening.jp XSS vulnerability
Open Bug Bounty ID: OBB-533495 Description| Value ---|--- Affected Website:| opening.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
timetable.waikato.ac.nz XSS vulnerability
Vulnerable URL: https://timetable.waikato.ac.nz/perl-bin/exams/search.cgi Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...
logosradionetwork.com XSS vulnerability
Open Bug Bounty ID: OBB-262238 Description| Value ---|--- Affected Website:| logosradionetwork.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
lenntech.com XSS vulnerability
Vulnerable URL: http://www.lenntech.com/cgi-bin/search.cgi?q=confirmOPENBUGBOUNTY//...
CVE-2016-4897: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in 1 filter/saveforward.cgi, 2 filter/save.cgi, 3 /man/search.cgi in Usermin before 1.690...
PT-2017-8594
Name of the Vulnerable Software and Affected Versions Usermin versions prior to 1.690 Description The issue concerns multiple cross-site scripting XSS vulnerabilities found in specific components of the software, including 1 filter/save forward.cgi, 2 filter/save.cgi, and 3 /man/search.cgi...
guxme.de XSS vulnerability
Vulnerable URL: https://www.guxme.de/cgi-bin/g/search.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1156501 VIP website status:| No Check guxme.de SSL connection:| Grade: A...
Usermin cross-site scripting vulnerabilties
Overview Usermin is a web-based interface used to manage webmail. Usermin contains reflected cross-site scripting vulnerabilities in /filter/saveforward.cgi, /filter/save.cgi and /man/search.cgi. Toshinobu Honjo of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC...
nymag.com XSS vulnerability
Vulnerable URL: http://nymag.com/search/search.cgi?fd=All=Relevance|0type=sw=0= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1737 Google Pagerank| 7 VIP website status:| Yes Chec...
MNOGoSearch 3.1.20 Search.CGI UL Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI parameters that are passed to the...
MNOGoSearch 3.1.20 Search.CGI UL Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI parameters that are passed to the...
mnoGoSearch search.cgi QUERY_STRING Parameter Parsing Arbitrary File Access
The version of mnoGoSearch installed on the remote host is affected by an arbitrary file access vulnerability due to a flaw in the 'search.cgi' script when parsing user-supplied input from the QUERYSTRING parameter. An unauthenticated, remote attacker can leverage this issue by sending a speciall...