CVE Vulnerability Catalog

A stack-based buffer overflow was found in TRENDnet TEW-432BRP version 3.10B20 in the formSetDomainFilter function of the /goform/formSetDomainFilter file. The attack can be launched remotely, and the exploit is publicly available. The vendor states the product has been EOL for 15 years.

A stack-based buffer overflow vulnerability was found in the TRENDnet TEW-432BRP router version 3.10B20 in the formSetProtocolFilter function of the /goform/formSetProtocolFilter file. Remote attack is possible by manipulating the protocol_name argument. The vendor states the product has been EOL for 15 years and will not be fixed.

In TRENDnet TEW-432BRP version 3.10B20, a stack-based buffer overflow vulnerability was found in the formSetUrlFilter function of the /goform/formSetUrlFilter file. The attack involves manipulating the keyword_list/keyword arguments and can be performed remotely. The vendor confirmed the product is EOL for 15 years and will not release a patch.

WinMTR 0.91 has a denial of service vulnerability due to a buffer overflow. An attacker can crash the application by sending a crafted input file with 238 bytes of repeated characters.

Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid and cid parameters. Attackers can send GET requests to index.php with crafted SQL payloads to extract database information including table and column names.

SQL injection vulnerability in Gate Pass Management System 2.1. Unauthenticated attackers can bypass authentication by injecting SQL code into the login and password parameters in a POST request to login-exec.php.

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract sensitive database information including usernames.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to watch.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the genre parameter. Attackers can send GET requests to genre.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.

An SQL injection vulnerability exists in AiOPMSD Final 1.0.0 in year.php. An unauthenticated attacker can send a GET request with a crafted year parameter to execute arbitrary SQL queries and extract sensitive database information such as usernames, database names, and versions.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the quality parameter. Attackers can send GET requests to quality.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability in the country parameter. Unauthenticated attackers can send crafted GET requests to country.php to execute arbitrary SQL queries and extract sensitive data such as usernames, database names, and versions.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability in the director parameter. Unauthenticated attackers can send crafted GET requests to director.php to execute arbitrary SQL queries and extract sensitive data such as usernames, database names, and versions.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability in the actor parameter. Unauthenticated attackers can send crafted GET requests to actor.php to execute arbitrary SQL queries and extract sensitive data such as usernames, database names, and versions.

An SQL injection vulnerability exists in AiOPMSD Final 1.0.0 in search.php. An unauthenticated attacker can send a GET request with a crafted 'q' parameter to execute arbitrary SQL queries and extract sensitive database information such as usernames, database names, and versions.

MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability in the 'id' parameter. Unauthenticated attackers can send crafted GET requests to email.php to execute arbitrary SQL queries and extract sensitive data such as table and column names.

SIM-PKH 2.4.1 contains an SQL injection vulnerability in the 'id' parameter of /admin/media.php. Authenticated attackers can send GET requests with module=pengurus and act=editpengurus parameters containing SQL UNION statements to extract database information including usernames and database versions.

SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by submitting PHP code through the fupload parameter. Attackers can upload PHP files via the aksi_pengurus.php endpoint with module=pengurus and act=update parameters, which are stored in the foto directory and executed as web scripts.

Open ISES Project 3.30A has a path traversal vulnerability in the ajax/download.php endpoint. An unauthenticated attacker can download arbitrary files by manipulating the filename parameter with ../ sequences.

eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through parameters in mod.php. Attackers can inject SQL through the artid, cid, did, contid, and aboutid parameters across publisher, diskusi, galeri, content, and about modules to extract database information including usernames, database names, and version details.