Show filters
275 Total Results
Displaying 111-120 of 275
Sort by:
Attacker Value
Unknown
CVE-2018-13858
Disclosure Date: July 17, 2018 (last updated November 27, 2024)
MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using the GET request "?action=reboot" for example.
0
Attacker Value
Unknown
CVE-2018-4832
Disclosure Date: April 24, 2018 (last updated November 26, 2024)
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route …
0
Attacker Value
Unknown
CVE-2018-5973
Disclosure Date: January 25, 2018 (last updated November 26, 2024)
SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter.
0
Attacker Value
Unknown
CVE-2017-17929
Disclosure Date: December 27, 2017 (last updated November 26, 2024)
PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.
0
Attacker Value
Unknown
CVE-2017-17924
Disclosure Date: December 27, 2017 (last updated November 26, 2024)
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/review_userwise.php.
0
Attacker Value
Unknown
CVE-2017-17930
Disclosure Date: December 27, 2017 (last updated November 26, 2024)
PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel.
0
Attacker Value
Unknown
CVE-2017-17927
Disclosure Date: December 27, 2017 (last updated November 26, 2024)
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/.
0
Attacker Value
Unknown
CVE-2017-17925
Disclosure Date: December 27, 2017 (last updated November 26, 2024)
PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter.
0
Attacker Value
Unknown
CVE-2017-17926
Disclosure Date: December 27, 2017 (last updated November 26, 2024)
PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
0
Attacker Value
Unknown
CVE-2017-17928
Disclosure Date: December 27, 2017 (last updated November 26, 2024)
PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.
0
