7 matches found
CVE-2023-26922
SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shellexect parameter to the \www\pages\matrix-gui-2.0 endpoint...
PT-2023-20850
Name of the Vulnerable Software and Affected Versions Varisicte matrix-gui version 2 Description A SQL injection issue allows a remote attacker to execute arbitrary code via the shell exect parameter to the "/www/pages/matrix-gui-2.0" endpoint. This enables the attacker to potentially gain...
CVE-2023-26922: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shellexect parameter to the \www\pages\matrix-gui-2.0 endpoint...
CVE-2021-43686
nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...
PT-2021-23912
Name of the Vulnerable Software and Affected Versions: nZEDb version 0.4.20 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the www/pages/api.php file. The exit function terminates the script and prints a message that includes the input from $ GET't'. This allows...
CVE-2021-43686: Improper Neutralization of Input During Web Page Generation
nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...
MDVA-2010:011 : apache-conf
This is a maintenance and bugfix release of apache-conf that mainly fixes so that the httpd service is handled more gracefully when reloading the apache server 56857. Other fixes where appliable: - fix 53887 obsolete favicon.ico file in Apache default www pages - workaround 47992 apache does not...