CVE-2024-0293 Totolink LR1200GB cstecgi.cgi setUploadSetting os command injection

A vulnerability classified as critical was found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected by this vulnerability is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to os command injection. The attack can be launched remotel...

CVE-2024-0293

CVE-2024-0293 affects Totolink LR1200GB, specifically the setUploadSetting function in /cgi-bin/cstecgi.cgi. The vulnerability arises from improper validation of the FileName parameter, causing OS command injection that can be triggered remotely. Public exploit information is indicated in multipl...

CVE-2024-0292

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to os command injection. It is possible to launch the attack remotely. The explo...

CVE-2023-7215

A vulnerability, which was classified as problematic, has been found in Chanzhaoyu chatgpt-web 2.11.1. This issue affects some unknown processing. The manipulation of the argument Description with the input leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

Command injection

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to os command injection. It is possible to launch the attack remotely. The explo...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Chanzhaoyu chatgpt-web 2.11.1. This issue affects some unknown processing. The manipulation of the argument Description with the input leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-0292 Totolink LR1200GB cstecgi.cgi setOpModeCfg os command injection

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to os command injection. It is possible to launch the attack remotely. The explo...

CVE-2024-0292

CVE-2024-0292 affects Totolink LR1200GB (9.1.0u.6619_B20230130). The vulnerability exists in the setOpModeCfg function of /cgi-bin/cstecgi.cgi, where an attacker can manipulate the hostName parameter to trigger an OS command injection. Impact is remote, with potential full compromise of affected ...

CVE-2024-0292 Totolink LR1200GB cstecgi.cgi setOpModeCfg os command injection

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to os command injection. It is possible to launch the attack remotely. The explo...

CVE-2023-7215 Chanzhaoyu chatgpt-web cross site scripting

A vulnerability, which was classified as problematic, has been found in Chanzhaoyu chatgpt-web 2.11.1. This issue affects some unknown processing. The manipulation of the argument Description with the input leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-0290

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stockedit.php. The manipulation of the argument itemtype leads to sql injection. The attack may be initiated remotely. The exploit has...

Sql injection

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stockedit.php. The manipulation of the argument itemtype leads to sql injection. The attack may be initiated remotely. The exploit has...

Command injection

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been rated as critical. This issue affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack may be initiated remotely. The...

CVE-2024-0291 Totolink LR1200GB cstecgi.cgi UploadFirmwareFile command injection

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been rated as critical. This issue affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack may be initiated remotely. The...

CVE-2024-0291

Totolink LR1200GB (firmware 9.1.0u.6619_B20230130) exposes a command injection in the UploadFirmwareFile function via the FileName parameter in /cgi-bin/cstecgi.cgi. Multiple sources (NVD/NVD-enriched, Red Hat, CNVD, CNNVD, PRION, PT Security, CVE lists) corroborate remote exploitation and critic...

CVE-2024-0290 Kashipara Food Management System stock_edit.php sql injection

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stockedit.php. The manipulation of the argument itemtype leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-0289

A vulnerability classified as critical was found in Kashipara Food Management System 1.0. This vulnerability affects unknown code of the file stockentrysubmit.php. The manipulation of the argument itemype leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2024-0288

A vulnerability classified as critical has been found in Kashipara Food Management System 1.0. This affects an unknown part of the file rawstockuseddamagedsubmit.php. The manipulation of the argument productname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

Sql injection

A vulnerability classified as critical has been found in Kashipara Food Management System 1.0. This affects an unknown part of the file rawstockuseddamagedsubmit.php. The manipulation of the argument productname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

Sql injection

A vulnerability classified as critical was found in Kashipara Food Management System 1.0. This vulnerability affects unknown code of the file stockentrysubmit.php. The manipulation of the argument itemype leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...