Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown
CVE-2024-13579
Disclosure Date: February 18, 2025 (last updated February 23, 2025)
The WP-Asambleas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'polls_popup' shortcode in all versions up to, and including, 2.85.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
0
Attacker Value
Unknown
CVE-2019-12328
Disclosure Date: July 22, 2019 (last updated November 27, 2024)
A command injection (missing input validation) issue in the remote phonebook configuration URI in the web interface of the Atcom A10W VoIP phone with firmware 2.6.1a2421 allows an authenticated remote attacker in the same network to trigger OS commands via shell metacharacters in a POST request.
0
Attacker Value
Unknown
CVE-2014-2318
Disclosure Date: March 11, 2014 (last updated October 05, 2023)
SQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute arbitrary SQL commands via the m parameter.
0
Attacker Value
Unknown
CVE-2009-5103
Disclosure Date: October 21, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable.
0
Attacker Value
Unknown
CVE-2011-3340
Disclosure Date: October 21, 2011 (last updated October 04, 2023)
SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
0
Attacker Value
Unknown
CVE-2010-4966
Disclosure Date: October 21, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action.
0
Attacker Value
Unknown
CVE-2009-5102
Disclosure Date: October 21, 2011 (last updated October 04, 2023)
SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpe_nid parameter.
0
Attacker Value
Unknown
CVE-2010-4967
Disclosure Date: October 21, 2011 (last updated October 04, 2023)
SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter.
0
