Show filters
23 Total Results
Displaying 11-20 of 23
Sort by:
Attacker Value
Unknown
CVE-2021-42897
Disclosure Date: May 16, 2022 (last updated February 23, 2025)
A remote command execution (RCE) vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $_POST[r_name] is directly passed into the $mysqlstr and is executed by exec.
0
Attacker Value
Unknown
CVE-2020-18106
Disclosure Date: August 27, 2021 (last updated February 23, 2025)
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
0
Attacker Value
Unknown
CVE-2020-18544
Disclosure Date: July 12, 2021 (last updated February 23, 2025)
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php".
0
Attacker Value
Unknown
CVE-2017-10901
Disclosure Date: December 01, 2017 (last updated November 26, 2024)
Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-10900
Disclosure Date: December 01, 2017 (last updated November 26, 2024)
PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-10902
Disclosure Date: December 01, 2017 (last updated November 26, 2024)
PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-10903
Disclosure Date: December 01, 2017 (last updated November 26, 2024)
Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors.
0
Attacker Value
Unknown
CVE-2010-2316
Disclosure Date: June 17, 2010 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) sbl parameters, different vectors than CVE-2007-3137.
0
Attacker Value
Unknown
CVE-2010-2317
Disclosure Date: June 17, 2010 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr, (3) pid, (4) sbl, and (5) FilePath parameters to default.asp; and the (6) sbr, (7) pr, and (8) psPrice parameters to printpage.asp.
0
Attacker Value
Unknown
CVE-2008-0085
Disclosure Date: July 08, 2008 (last updated October 04, 2023)
SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 does not initialize memory pages when reallocating memory, which allows database operators to obtain sensitive information (database contents) via unknown vectors related to memory page reuse.
0
