Lucene search
+L

566 matches found

Positive Technologies
Positive Technologies
•added 2014/01/10 12:00 a.m.•5 views

PT-2014-4174

Name of the Vulnerable Software and Affected Versions Conceptronic C54APM access point with runtime code 1.26 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This can be achieved via two methods: 1 the submit-url parameter in a...

5.8CVSS0.01168EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2014/01/10 12:00 a.m.•10 views

PT-2014-4175

Name of the Vulnerable Software and Affected Versions Conceptronic C54APM access point with runtime code 1.26 Description The issue concerns a CRLF injection vulnerability. This allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the submit-url...

4.3CVSS0.00982EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/10 12:00 a.m.•6 views

CVE-2014-1405: Improper Input Validation

Multiple open redirect vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via 1 the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or 2 the wlan-url...

5.8CVSS6AI score0.01168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/10 12:00 a.m.•10 views

CVE-2014-1406: Improper Input Validation

CRLF injection vulnerability in goform/formWlSiteSurvey on the Conceptronic C54APM access point with runtime code 1.26 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the submit-url parameter in a Refresh action...

4.3CVSS6AI score0.00982EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/10 12:00 a.m.•8 views

CVE-2014-1407: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to inject arbitrary web script or HTML via 1 the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or 2 the wlan-url parameter to...

4.3CVSS5.9AI score0.01193EPSS
SaveExploits1References2
myhack58
myhack58
•added 2010/07/05 12:00 a.m.•33 views

Star outside the virtual host management system brush money vulnerability+injection vulnerability-vulnerability warning-the black bar safety net

Test station: http://www.. com/ Register for an account, for example: test Visit: http://www.. com/netpay/ips/ Enter your username and amount of recharge. For example: test 1 $ 0 Point the next step will be to generate you an order number. Such as 7 2 2 9 7 8 Remember it Parameter structure:...

0.1AI score
SaveExploits0
Rows per page
Query Builder