30 matches found
PT-2019-12642
Name of the Vulnerable Software and Affected Versions TP-Link M7350 V3 versions prior to firmware 190531 Description The web-based configuration interface is affected by several post-authentication command injection issues. Recommendations For versions prior to firmware 190531, update the firmwar...
CVE-2019-12103: Improper Neutralization of Special Elements used in an OS Command
The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command injection vulnerability...
PT-2019-4121
Name of the Vulnerable Software and Affected Versions TP-Link M7350 versions prior to firmware 190531 Description The issue is related to the lack of data sanitization at the management level, allowing a remote attacker to execute arbitrary commands before authentication. This can be exploited...
Nagios XI < 2012R2.4 SQL Injection Vulnerability (deprecated)
Binary data 7138.pasl...
FreePBX 2.10.0, 2.9.0 Multiple Vulnerabilities
Exploit for php platform in category web applications Product: FreePBX Version: 2.10.0, 2.9.0 and perhaps earlier versions Type: Remote Command Execution, XSS Release Date: March 14, 2012 Vendor Notification Date: Jun 12, 2011 Author: Martin Tschirsich Overview: A remote command execution...
FreePBX 2.10.0 Remote Command Execution / XSS
Product: FreePBX Version: 2.10.0, 2.9.0 and perhaps earlier versions Type: Remote Command Execution, XSS Release Date: March 14, 2012 Vendor Notification Date: Jun 12, 2011 Author: Martin Tschirsich Overview: A remote command execution vulnerability and some XSS in current and earlier FreePBX...
Design/Logic Flaw
Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attackers to obtain sensitive information on the device such as telephone numbers called, and possibly connect to other hosts. NOTE: it is possible that this...
CVE-2001-1065
CVE-2001-1065 affects Cisco 600-series routers running CBOS 2.0.1–2.4.2ap, where the web-based configuration utility binds to port 80 even when web configuration services are disabled. This could leave the device accessible to an attacker via the web interface. Root cause: the process binds port ...
CVE-2001-1065: Undefined Security Weakness
Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack...
