CVE-2022-25323

ZEROF Web Server 2.0 allows /admin.back XSS...

CVE-2022-25323

CVE-2022-25323 affects ZEROF Web Server 2.0, with a cross-site scripting (XSS) vulnerability reachable via the /admin.back endpoint. Public docs identify CWE-79 and CVSS v3.1 base score 6.1 (NETWORK, LOW complexity, UI REQUIRED, changed scope; impact: confidentiality/integrity LOW, availability N...

Exploit for SQL Injection in Zerof Web_Server

Public CVE | CVE Number | Produc...

ZEROF Web Server跨站脚本漏洞

ZEROF Web Server is an open source Web framework that simplifies modern Web development . It allows you to build applications without having to worry about package management or routing. ZEROF Web Server has a security vulnerability , there is no information about the vulnerability , please keep...

PT-2022-17211

Name of the Vulnerable Software and Affected Versions ZEROF Web Server version 2.0 Description The issue allows for SQL Injection via the /HandleEvent endpoint. Recommendations For ZEROF Web Server version 2.0, consider restricting access to the /HandleEvent endpoint until a patch is available...

ZEROF Web Server SQL注入漏洞

ZEROF Web Server is an open source Web framework that simplifies modern Web development . It allows you to build applications without having to worry about package management or routing. ZEROF Web Server has a SQL injection vulnerability that allows HandleEvent SQL injection...

CVE-2021-30176

The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...

CVE-2021-30176

The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...

CVE-2021-30175

ZEROF Web Server 1.0 April 2021 allows SQL Injection via the /HandleEvent endpoint for the login page...

CVE-2021-30175

ZEROF Web Server 1.0 April 2021 allows SQL Injection via the /HandleEvent endpoint for the login page...

Sql injection

ZEROF Web Server 1.0 April 2021 allows SQL Injection via the /HandleEvent endpoint for the login page...

Sql injection

The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...

CVE-2021-30176

The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...

CVE-2021-30176

The CVE-2021-30176 entry concerns the ZEROF Expert pro/2.0 mobile app, where an SQL Injection is possible through the Authorization header to the /v2/devices/add endpoint. Sources in linked records (Red Hat, NVD, CVE listing, CNNVD) confirm the vulnerability and its impact vector, but the connect...

CVE-2021-30176

The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint...

CVE-2021-30175

ZEROF Web Server 1.0 April 2021 allows SQL Injection via the /HandleEvent endpoint for the login page...

CVE-2021-30175

The vulnerability CVE-2021-30175 affects ZEROF Web Server 1.0 (April 2021), where an SQL Injection is possible via the /HandleEvent endpoint on the login page. The Nuclei template and CIRCL/nvd entries confirm that this is an injection in the login handling path (CWE-89) with potential for arbitr...

ZEROF Expert pro SQL注入漏洞

ZEROF Expert pro is a mobile application for the ZEROF platform. For professional use by employees and agents of sellers involved in the inspection of insurance objects, collateralized assets, responsible for the display of goods at retail outlets. A SQL injection vulnerability exists in ZEROF...

ZEROF Web Server SQL注入漏洞

ZEROF Web Server is an open source Web framework that simplifies modern Web development . It allows you to build applications without having to worry about package management or routing. A SQL injection vulnerability exists in ZEROF Web Server version 1.0, which originated when the program allowe...