CVE-2024-0995

A vulnerability was found in Tenda W6 1.0.0.94122. It has been rated as critical. Affected by this issue is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched...

CVE-2023-30260

Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form...

CVE-2023-30260

CVE-2023-30260 affects RaspAP raspap-webgui (versions up to 2.8.8). The root cause is a command injection via a crafted POST to the hostapd settings form, enabling remote execution of arbitrary commands. Documented impact is high (C, I, A) with network attack vector and low privileges. Some conne...

PT-2023-22611 · Raspap · Raspap

Name of the Vulnerable Software and Affected Versions: RaspAP raspap-webgui versions 2.8.8 and earlier Description: A command injection issue allows remote attackers to execute arbitrary commands by sending a crafted POST request to the hostapd settings form. This can be achieved via the hostapd...

CVE-2023-30260

Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form...

CVE-2023-30260

Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form...

Cimy Header Image Rotator <= 6.1.1 - Arbitrary Settings Update via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack document.getElementById"test".submit; input ty...

CVE-2021-24133

Lack of CSRF checks in the ActiveCampaign WordPress plugin, versions before 8.0.2, on its Settings form, which could allow attacker to make a logged-in administrator change API Credentials to attacker's account...

PT-2020-12810 · Algolplus · Algolplus Advanced Order Export For Woocommerce

Name of the Vulnerable Software and Affected Versions: AlgolPlus Advanced Order Export For WooCommerce plugin version 3.1.3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the woe post type parameter in the "view/settings-form.php"...

WordPress Custom Simple Rss Plugin Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Custom Simple Rss plugin is an RSS feed plugin used in it. A cross-site request forgery vulnerability exists in the Settings form in...

CVE-2019-14327

A CSRF vulnerability in Settings form in the Custom Simple Rss plugin 2.0.6 for WordPress allows attackers to change the plugin settings...

Cross site request forgery (csrf)

A CSRF vulnerability in Settings form in the Custom Simple Rss plugin 2.0.6 for WordPress allows attackers to change the plugin settings...

CVE-2019-14327

A CSRF vulnerability in Settings form in the Custom Simple Rss plugin 2.0.6 for WordPress allows attackers to change the plugin settings...

CVE-2015-5489

Cross-site scripting XSS vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors involving the field settings form...

Cross site scripting

Cross-site scripting XSS vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors involving the field settings form...

CVE-2015-5489

Cross-site scripting XSS vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors involving the field settings form...

Video Bookmark CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Video Bookmark CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/video-bookmark-script/28016/ Category:: webapps Demo : http://www.e-soft24.com/scripts/video-bookmark/admin/ Greetz: Inj3ct0r Explo...

iLister Multi-Purpose Listing CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: iLister Multi-Purpose Listing CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/ilister-multipurpose-listing-script/23352/ Category:: webapps Demo : http://demo.worksforweb.com/iLister/admin Greet...