465 matches found
CVE-2022-23158: Permissive List of Allowed Inputs
Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user with standard privilege could potentially exploit this vulnerability and provide incorrect port information and get connected to valid WMS server...
PT-2022-15886
Name of the Vulnerable Software and Affected Versions Wyse Device Agent versions 14.6.1.4 and below Description The issue allows a local authenticated user with standard privilege to potentially exploit it, providing incorrect port information and getting connected to a valid WMS server. This is ...
CVE-2022-23156
Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulnerability by providing invalid input in order to obtain a connection to WMS server...
CVE-2020-18106
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...
CVE-2020-18106
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...
Sql injection
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...
CVE-2020-18106
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...
CVE-2020-18106
CVE-2020-18106 affects WMS v1.0 where the GET parameter id is passed without filtering, enabling SQL injection. Root cause: unsanitized id parameter in WMS v1.0. Documented impact indicates attacker could obtain sensitive database information; exploitation status is not detailed in the provided s...
CVE-2020-18106
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...
PT-2021-10129
Name of the Vulnerable Software and Affected Versions: WMS version 1.0 Description: The issue allows attackers to perform SQL injection due to the GET parameter id being passed without filtering. Recommendations: For WMS version 1.0, consider restricting access to the id parameter in the affected...
CVE-2020-18106: Improper Neutralization of Special Elements used in an SQL Command
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...
CVE-2020-18544
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php"...
Sql injection
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php"...
CVE-2020-18544
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php"...
CVE-2020-18544
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php"...
CVE-2020-18544
CVE-2020-18544 affects WMS v1.0, where a SQL injection in chkuser.php via the username parameter allows remote attackers to execute arbitrary code. Root cause: improper handling of user input in the login/component path leads to SQL injection. Documented impact indicates potential arbitrary code ...
CVE-2020-18544: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php"...
PT-2021-10190
Name of the Vulnerable Software and Affected Versions: WMS version 1.0 Description: The issue allows remote attackers to execute arbitrary code via the username parameter in the "chkuser.php" component. Recommendations: For WMS version 1.0, consider restricting access to the "chkuser.php" compone...
CVE-2018-11063
Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by specifying the paths to the service executables without quotes. This could potentially allow a low-privileged local user to execute arbitrary...
CVE-2018-11063
Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by specifying the paths to the service executables without quotes. This could potentially allow a low-privileged local user to execute arbitrary...