4321 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter in a process action to admin/login.php; 2 pageTitle, 3 currentproductid, or 4 cPath parameter to...
PT-2015-3520
Name of the Vulnerable Software and Affected Versions osCMax versions prior to 2.5.1 Description The issue concerns SQL injection vulnerabilities in the admin panel. These vulnerabilities allow remote attackers to execute arbitrary SQL commands via specific parameters in various PHP files. For...
CVE-2015-2926: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header to index.php...
openSUSE Security Update : dbus-1 / dbus-1-x11 (openSUSE-2015-150)
dbus-1, dbus-1-x11 were updated to version 1.8.16 to fix one security issue. This update fixes the following security issue : - CVE-2015-0245: Do not allow non-uid-0 processes to send forged ActivationFailure messages. On Linux systems with systemd activation, this would allow a local denial of...
WordPress Plugin GD Star Rating SQL Injection Vulnerability
WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.GD Star Rating plugin is a rating and voting plugin. WordPress plugin GD Star Rating SQL injection vulnerability. Due ...
Apache Solr Cross-Site Scripting Vulnerability
Apache Solr is an open source search server. A cross-site scripting vulnerability in the Admin UI Plugin / Stats page in version 4.x of Apache Solr prior to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via fieldvaluecache objects...
CVE-2014-3628
Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...
PT-2015-3729
Name of the Vulnerable Software and Affected Versions Apache Solr versions 4.x through 4.10.2 Description A cross-site scripting XSS issue exists in the Admin UI Plugin / Stats page, allowing remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object. Recommendations F...
CVE-2014-9021
Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...
CVE-2014-9020
Cross-site scripting XSS vulnerability in the Quick Stats page psilan.cgi in ZTE ZXDSL 831 and 831CII allows remote attackers to inject arbitrary web script or HTML via the domainname parameter in a save action. NOTE: this issue was SPLIT from CVE-2014-9021 per ADT1 due to different affected...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the Quick Stats page psilan.cgi in ZTE ZXDSL 831 and 831CII allows remote attackers to inject arbitrary web script or HTML via the domainname parameter in a save action. NOTE: this issue was SPLIT from CVE-2014-9021 per ADT1 due to different affected...
CVE-2014-9021
Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...
PT-2014-8790
Name of the Vulnerable Software and Affected Versions ZTE ZXDSL versions 831 and 831CII Description A cross-site scripting XSS issue exists in the Quick Stats page, specifically in the psilan.cgi component, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by...
ZTE ZXDSL 831 Multiple Cross Site Scripting Vulnerability
Exploit for hardware platform in category web applications Exploit Title: ZTE ZXDSL 831 Multiple Cross Site Scripting Date: 11/3/2014 Exploit Author: Paulos Yibelo Vendor Homepage: zte.com.cn Software Link: - Version: - Tested on: Windows 7 CVE :- TR-069 Client page: Stored. executes when users g...
ZTE ZXDSL 831 Multiple Cross Site Scripting
TR-069 Client page: Stored. executes when users go to http://192.168.1.1/tr69cfg.html...
ZTE ZXDSL 831 Cross Site Scripting
Exploit Title: ZTE ZXDSL 831 Multiple Cross Site Scripting Date: 11/3/2014 Exploit Author: Paulos Yibelo Vendor Homepage: zte.com.cn Software Link: - Version: - Tested on: Windows 7 CVE :- TR-069 Client page: Stored. executes when users go to http://192.168.1.1/tr69cfg.html...
CVE-2012-5865
SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action...
Sql injection
SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action...