NETGEAR WAC120 Cross-Site Scripting Vulnerability

Netgear NETGEAR WAC120 is a wireless access point AP from Netgear, Inc. A cross-site scripting vulnerability exists in the Netgear WAC120 AC Access Point, which stems from unauthenticated cross-site scripting XSS could lead to a variety of attacks, such as session hijacking or even clipboard...

Climatix POL909跨站脚本漏洞

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and to implement and load customer web pages and features.Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to impleme...

WAGO Cross-Site Request Forgery Vulnerability

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in the WAGO 750-8212 PFC200 G2 2ETH RS that originates fr...

CVE-2021-46382

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

CVE-2021-46382

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

Cross site scripting

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

CVE-2021-46382

Unauthenticated cross-site scripting XSS in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking...

CVE-2021-46382

The CVE-2021-46382 entry concerns the Netgear WAC120 AC Access Point, with an unauthenticated cross-site scripting (XSS) vulnerability. Connected records consistently describe this as XSS that could enable session hijacking and, in some notes, clipboard hijacking. The NVD entry provides CVSS scor...

NETGEAR WAC120 跨站脚本漏洞

Netgear NETGEAR WAC120 is a wireless access point AP from Netgear, Inc. A cross-site scripting vulnerability exists in the Netgear WAC120 AC Access Point, which stems from unauthenticated cross-site scripting XSS could lead to a variety of attacks, such as session hijacking or even clipboard...

Zyxel ZyWALL 2 Plus Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Zyxel ZyWALL 2 Plus, a firewall appliance for corporate environments from Zyxel China, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability to be able to execute arbitrary...

Event Management 跨站脚本漏洞

Event Management is an event management system, and a cross-site scripting vulnerability exists in Event Management that could be exploited to obtain a PHPSESSID and use it to manipulate a created system login session...

CVE-2021-46387

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting XSS. Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard...

CVE-2021-46387

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting XSS. Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard...

Cross site scripting

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting XSS. Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard...

CVE-2021-46387

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting XSS. Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard...

CVE-2021-46387

CVE-2021-46387 affects ZyXEL ZyWALL 2 Plus Internet Security Appliance. The issue is a Cross-Site Scripting (XSS) vulnerability caused by insecure URI handling, enabling an attacker to execute arbitrary JavaScript in a user’s browser and potentially perform clipboard hijacking or session hijackin...

Zyxel Zywall310跨站脚本漏洞

A cross-site scripting vulnerability exists in Zyxel ZyWALL 2 Plus, a firewall appliance for corporate environments from Zyxel China, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability to be able to execute arbitrary...

Accounting Journal Management Cross-Site Scripting Vulnerability

Accounting Journal Management is a simple PHP-based accounting journal management system with a trial balance. accounting Journal Management version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of filtering of user-supplied data and The vulnerability is caused ...

CVE-2022-24582

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manageuser from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network...

CVE-2022-24582

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manageuser from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network...