| Overview : | ||
|
||
Server / Test environment (please complete the following information):
- Kali Linux 4.19.0
- PHP version: 7.1.32
- Apache version: 2.4.41
- Browser(s) tested with: Mozilla Firefox Latest Build
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks
-
Prophaze WAF
- March 18, 2020
- 9:10 pm
Share on facebook
Share on google
Share on twitter
Share on linkedin
Share on facebook
Facebook
Share on twitter
Twitter
Share on linkedin
LinkedIn
Recent Posts
Follow Us
zzcms 2018 template_user.php ml/title code injection
August 26, 2021
No Comments
A vulnerability was found in zzcms 2018 (Content Management System) and classified as critical. This issue affects an unknown function
ZyXEL VPN2S 1.12 Web Server path traversal
September 29, 2021
No Comments
A vulnerability classified as problematic was found in ZyXEL VPN2S 1.12. Affected by this vulnerability is an unknown part of
Zyxel VPN2S 1.12 CGI Program os command injection
September 29, 2021
No Comments
A vulnerability has been found in Zyxel VPN2S 1.12 and classified as critical. This vulnerability affects some unknown processing of
Zyxel USG/USG Flex/Zywall/ATP/VPN up to 4.64 Web-based Management Interface improper authentication
July 2, 2021
No Comments
A vulnerability was found in Zyxel USG, USG Flex, Zywall, ATP and VPN up to 4.64 (Firewall Software). It has
ZyXEL GS1900-8 2.60 LLDP Packet cross site scripting
July 26, 2021
No Comments
A vulnerability was found in ZyXEL GS1900-8 2.60. It has been classified as problematic. This affects an unknown code of
Zynamics BinDiff up to 6 i64 File use after free
June 30, 2021
No Comments
A vulnerability, which was classified as critical, has been found in Zynamics BinDiff up to 6. This issue affects an
Web Application Firewall Solution
CVE-2023-0556 : CONTENTSTUDIO PLUGIN UP TO 1.2.5 ON WORDPRESS CSTU_GET_METADATA AUTHORIZATION
January 30, 2023
No Comments
Description The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions
CVE-2022-48108 : D-LINK DIR-878 1.30B08 SUBNETMASK COMMAND INJECTION
January 28, 2023
No Comments
Description D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to
CVE-2022-47767 : SOLAR-LOG GATEWAY UP TO 4.2.7/5.1.1 SLCORE BACKDOOR
January 27, 2023
No Comments
Description A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker.