131179 matches found
Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-16634)
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability, which originates from the parameter page in the file /goform/fromRouteStatic that fails to correctly validate the length and size of the input data, which can be exploited by an...
WordPress Broken Link Notifier plugin code execution vulnerability
WordPress Broken Link Notifier plugin is a plugin for monitoring broken links e.g. 404 errors, timeout links, etc. within a website. A code execution vulnerability exists in the WordPress Broken Link Notifier plugin that stems from the possibility of embedding malicious input when exporting CSV...
Chat System update_account.php File SQL Injection Vulnerability
Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that stems from an error in the parameter musername in the file /user/updateaccount.php that lacks validation of an externally entered SQL statement. An attacker can use this vulnerability to execute illegal SQL...
Tenda FH1202 /goform/Natlimit File Buffer Overflow Vulnerability
The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 version 1.2.0.14408 suffers from a buffer overflow vulnerability, which originates from the function fromNatlimit parameter page in the file /goform/Natlimit that fails to correctly validate the length of the input data, whi...
Tenda FH1201 /goform/PPTPDClient File Buffer Overflow Vulnerability
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 version 1.2.0.14408 suffers from a buffer overflow vulnerability, which originates from a failure to properly validate the length of input data in the parameter modino/username in the file /goform/PPTPDClient, which can be...
Apache HTTP Server Input Validation Error Vulnerability (CNVD-2025-16612)
Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An input validation error vulnerability exists in Apache HTTP Server, which can be exploited by an attacker to manipulate the...
Vehicle Parking Management System manage-outgoingvehicle.php File SQL Injection Vulnerability
Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that stems from an error in the parameter del in the file /admin/manage-outgoingvehicle.php that lacks validation of externally entered SQL statements. An...
Tenda AX1803 Buffer Overflow Vulnerability
Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A security vulnerability exists in Tenda AX1803 version 1.0.0.1, which originates from a stack buffer overflow due to incorrect manipulation of the parameter deviceList by the function formSetWifiMacFilterCfg in the file...
Cisco ISE and ISE-PIC Injection Vulnerabilities (CNVD-2025-17186)
Cisco ISE and Cisco ISE-PIC are both products of the U.S. Cisco Cisco.Cisco ISE is the identity services engine introduced by Cisco, mainly used for network access control and security management.Cisco ISE-PIC is the passive identity connector of the Cisco Identity Services Engine, which is mainl...
Tenda Ax1803 Stack Buffer Overflow Vulnerability
Tenda Ax1803 is a firmware product from Tenda that provides a range of features for network device setup and management. Users can use Tenda Ax1803 Firmware to perform network configuration, manage routers and other operations in a convenient and practical way. A stack buffer overflow vulnerabili...
Mobile Shop EditMobile.php File SQL Injection Vulnerability
Mobile Shop is a mobile store. Mobile Shop suffers from a SQL injection vulnerability that stems from an error in the parameter ID in the file /EditMobile.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to...
Tenda O3V2 /goform/getTraceroute file command injection vulnerability
Tenda O3V2 is an outdoor wireless bridge from Tenda, China. The Tenda O3V2 suffers from a command injection vulnerability that stems from the parameter dest in the file /goform/getTraceroute failing to correctly filter constructed command special characters, commands, and so on. No details of the...
Advantech iView NetworkServlet.archiveTrap Function SQL Injection Vulnerability
Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. An SQL injection vulnerability exists in the Advantech iView NetworkServlet.archiveTrap function. An attacker can exploit this vulnerability to perform SQL injection and execu...
Tenda FH1202 /goform/AdvSetWan File Buffer Overflow Vulnerability
The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 version 1.2.0.14408 suffers from a buffer overflow vulnerability, which originates from the failure of the function fromAdvSetWan parameter PPPOEPassword to correctly validate the length of the input data in file...
Vehicle Parking Management System index.php File SQL Injection Vulnerability
Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that stems from an error in the parameter Username in file /admin/index.php that lacks validation of an externally entered SQL statement. An attacker can...
Tenda FH1201 /goform/fromSafeUrlFilter File Buffer Overflow Vulnerability
The Tenda FH1201 is a wireless router from Tenda, China. The product is mainly aimed at home and small office network environments. The Tenda FH1201 suffers from a buffer overflow vulnerability, which originates from the parameter page in the file /goform/fromSafeUrlFilter that fails to correctly...
Vehicle Parking Management System search-vehicle.php File SQL Injection Vulnerability
Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in file /admin/search-vehicle.php. An attacke...
Tenda FH1201 /goform/SafeEmailFilter File Buffer Overflow Vulnerability
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 version 1.2.0.14408 suffers from a buffer overflow vulnerability that originates from the parameter page in the file /goform/SafeEmailFilter that fails to correctly validate the length of the input data, which can be exploit...
Job Diary view-details.php file SQL Injection Vulnerability
Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from an error in the parameter jobid in the file /view-details.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL...
Tenda AC1206 Buffer Overflow Vulnerability
The Tenda AC1206 is a wireless Gigabit router from Tenda China. A buffer overflow vulnerability exists in Tenda AC1206 version 15.03.06.23, which originates from the parameter deviceList in the file /goform/setMacFilterCfg that fails to correctly validate the length of the input data, and can be...
Advantech iView Cross-Site Scripting Vulnerability (CNVD-2025-17827)
Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. A cross-site scripting vulnerability exists in Advantech iView due to improper validation of user-supplied input. An attacker could use this vulnerability to execute...
WordPress Broken Link Notifier plugin code issue vulnerability
WordPress Broken Link Notifier plugin is a plugin for monitoring broken links e.g. 404 errors, timeout links, etc. within a website. The WordPress Broken Link Notifier plugin suffers from a code issue vulnerability that stems from the server not implementing an adequate validation mechanism to...
Modern Bag contact-list.php File SQL Injection Vulnerability
Modern Bag is an online management system. Modern Bag suffers from an SQL injection vulnerability that stems from an error in the parameter idStatus in file /admin/contact-list.php that lacks validation of externally entered SQL statements. An attacker can use this vulnerability to execute illega...
Student Result Management System /notice-details.php File SQL Injection Vulnerability
Student Result Management System is a student result management system. Student Result Management System suffers from a SQL injection vulnerability that stems from an error in the parameter nid in the file /notice-details.php that lacks validation of externally entered SQL statements. An attacker...
Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-16633)
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability, which originates from the parameter mitssid in the file /goform/AdvSetWrlsafeset that fails to correctly validate the length and size of the input data, which can be exploited by...
WordPress Plugin BeeTeam368 Extensions Code Issue Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in the WordPress plugin BeeTeam368 Extensions, which stems from a lack...
Advantech iView CUtils.checkSQLInjection Function SQL Injection Vulnerability
Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. An SQL injection vulnerability exists in the Advantech iView CUtils.checkSQLInjection function, which can be exploited by an attacker to cause an information disclosure or...
Tenda FH1201 /goform/GstDhcpSetSer File Buffer Overflow Vulnerability
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 version 1.2.0.14408 suffers from a buffer overflow vulnerability, which originates from the parameter dips in the file /goform/GstDhcpSetSer that fails to correctly validate the length of the input data, which can be exploit...
Tenda FH1202 /goform/PPTPUserSetting File Buffer Overflow Vulnerability
The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 version 1.2.0.14408 suffers from a buffer overflow vulnerability, which originates from the function fromPptpUserSetting parameter delno in the file /goform/PPTPUserSetting failing to correctly validate the length of the inp...
TOTOLINK N300RB Command Injection Vulnerability
The TOTOLINK N300R is a wireless router for home and small office scenarios from Korean networking brand TOTOLINK. The TOTOLINK N300RB suffers from a command injection vulnerability that originates from the remote support feature of static key protection, which can be exploited by an attacker to...
Online Appointment Booking System getDay.php File SQL Injection Vulnerability
Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that stems from an error in the parameter cidval in the file /getDay.php that lacks validation of externally entered SQL statements. The...
Tenda FH451 /goform/L7Prot File Buffer Overflow Vulnerability
The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability, which originates from the function frmL7ProtForm parameter page in file /goform/L7Prot that fails to correctly validate the length of the input data, which can...
Vehicle Parking Management System view--detail.php file SQL Injection Vulnerability
Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that stems from an error in the parameter viewid in the file /users/view--detail.php that lacks validation of externally entered SQL statements. An attack...
Tenda O3V2 /goform/setPingInfo file command injection vulnerability
Tenda O3V2 is an outdoor wireless bridge from Tenda, China. Tenda O3V2 suffers from a command injection vulnerability, which originates from the parameter domain in the file /goform/setPingInfo failing to correctly filter constructed command special characters, commands, etc. The vulnerability is...
Tenda O3V2 /goform/setRateTest File Buffer Overflow Vulnerability
Tenda O3V2 is an outdoor wireless bridge from Tenda, China. The Tenda O3V2 suffers from a buffer overflow vulnerability, which originates from the parameter destIP in the file /goform/setRateTest that fails to correctly validate the length of the input data, which can be exploited by an attacker ...
D-Link DIR-818LW Command Injection Vulnerability
The D-Link DIR-818LW is a dual-band Gigabit cloud router that supports wireless standards such as IEEE 802.11ac and IEEE 802.11n, with a wireless transfer rate of up to 433Mbps, and also provides one USB 2.0 port and four Gigabit wired ports. The D-Link DIR-818LW suffers from a command injection...
Modern Bag contact-back.php File SQL Injection Vulnerability
Modern Bag is an online management system. Modern Bag suffers from a SQL injection vulnerability that stems from an error in the parameter contact-name in file /contact-back.php that lacks validation of externally entered SQL statements. An attacker can use this vulnerability to execute illegal S...
Tenda O3V2 /goform/setSysTimeInfo file buffer overflow vulnerability
Tenda O3V2 is an outdoor wireless bridge from Tenda, China. The Tenda O3V2 suffers from a buffer overflow vulnerability, which originates from the parameter Time in the file /goform/setSysTimeInfo that fails to correctly validate the length of the input data, and can be exploited by an attacker t...
Online Appointment Booking System get_town.php File SQL Injection Vulnerability
Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that stems from an error in the parameter countryid in file /gettown.php that lacks validation of an externally entered SQL statement. An attacke...
Library System teacher/profile.php file code issue vulnerability
Library System is a library system. Library System has a code issue vulnerability that stems from the lack of valid validation of uploaded files by the parameter image in the file /user/teacher/profile.php. An attacker can exploit this vulnerability to upload malicious files...
Mobile Shop LoginAsAdmin.php File SQL Injection Vulnerability
Mobile Shop is a mobile store. Mobile Shop suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /LoginAsAdmin.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...
Tenda O3V2 /goform/operateMacFilter File Buffer Overflow Vulnerability
Tenda O3V2 is an outdoor wireless bridge from Tenda, China. The Tenda O3V2 suffers from a buffer overflow vulnerability that originates from the /goform/operateMacFilter file parameter mac failing to properly validate the length and size of the input data, which can be exploited by an attacker to...
Job Diary search.php File SQL Injection Vulnerability
Job Diary is a job diary software. Job Diary suffers from an SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements due to an error in the parameter Search in the file /search.php. An attacker can exploit this vulnerability to execute illegal SQL...
TOTOLINK T6 setTracerouteCfg function Command Injection Vulnerability
TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that originates from the failure of the parameter command of the function setTracerouteCfg in the fi...
Online Appointment Booking System ulocateus.php File SQL Injection Vulnerability
Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that stems from an error in the parameter doctorname in the file /ulocateus.php that lacks validation of externally entered SQL statements. An...
Vehicle Parking Management System manage-category.php File SQL Injection Vulnerability
Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter del in the file /admin/manage-category.php. An attacker...
Tenda FH451 /goform/addressNat File Buffer Overflow Vulnerability
The Tenda FH451 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda FH451 1.0.0.9 and earlier versions, which stems from the file /goform/addressNat parameter page failing to correctly validate the length of the input data, and can be exploited by a remote...
Library System profile.php file code issue vulnerability
Library System is a library system. Library System has a code issue vulnerability that stems from the lack of valid validation of uploaded files by the parameter image in the file /user/student/profile.php. An attacker can exploit this vulnerability to upload malicious files...
Vehicle Parking Management System view-outgoingvehicle-detail.php file SQL Injection Vulnerability
Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter viewid in file /admin/view-outgoingvehicle-detail.php...
Modern Bag productadd_back.php File SQL Injection Vulnerability
Modern Bag is an online management system. Modern Bag suffers from a SQL injection vulnerability that stems from an error in the parameter namepro in file /admin/productaddback.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...