rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-28429 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:59.000Z
CVE-2022-28431 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:57.000Z
CVE-2022-28432 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:57.000Z
CVE-2022-28433 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:56.000Z
CVE-2022-28434 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:56.000Z
CVE-2022-28435 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:55.000Z
CVE-2022-28436 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:54.000Z
CVE-2022-28437 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:54.000Z
CVE-2022-28438 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:53.000Z
CVE-2022-28439 
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:52.000Z
CVE-2022-28440 
An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:52.000Z
CVE-2022-28443 
UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:49.000Z
CVE-2022-28444 
UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:49.000Z
CVE-2022-28445 
KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-21T19:04:50.000Z
CVE-2022-28448 
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). An attacker (role customer) can inject javascript code to First name or Last name at Customer Info.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T19:58:32.000Z
CVE-2022-28449 
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:02:42.000Z
CVE-2022-28450 
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new post, which allows a remote attacker to execute arbitrary JavaScript code at client browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:05:46.000Z
CVE-2022-28451 
nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-01T23:12:44.000Z
CVE-2022-28452 
Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-29T14:59:48.000Z
CVE-2022-28454 
Limbas 4.3.36.1319 is vulnerable to Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-28T19:56:03.000Z
CVE-2022-28461 
mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T12:18:30.000Z
CVE-2022-28462 
novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T12:23:56.000Z
CVE-2022-28463 
ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-08T00:00:00.000Z
CVE-2022-28464 
Apifox through 2.1.6 is vulnerable to Cross Site Scripting (XSS) which can lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T13:16:39.000Z
CVE-2022-28467 
Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T19:03:04.000Z
CVE-2022-28468 
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T19:03:05.000Z
CVE-2022-28470 
marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-08T19:55:31.000Z
CVE-2022-28471 
In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfif_encode() in jfif.c. This is due to the incomplete patch for issue 38
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T12:37:18.000Z
CVE-2022-28477 
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-28T19:41:21.000Z
CVE-2022-28478 
SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. The "Remove file" functionality inside the "Log files management" menu does not sanitize user input allowing attackers with admin privileges to delete arbitrary files on the remote system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T22:17:28.000Z
CVE-2022-28479 
SeedDMS versions 6.0.18 and 5.1.25 and below are vulnerable to stored XSS. An attacker with admin privileges can inject the payload inside the "Role management" menu and then trigger the payload by loading the "Users management" menu
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T22:17:23.000Z
CVE-2022-28480 
ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-29T16:14:03.000Z
CVE-2022-28481 
CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-01T14:24:02.000Z
CVE-2022-28487 
Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T00:00:00.000Z
CVE-2022-28488 
The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T14:18:07.000Z
CVE-2022-28491 
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-23T00:00:00.000Z
CVE-2022-28492 
TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-23T00:00:00.000Z
CVE-2022-28493 
A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-23T00:00:00.000Z
CVE-2022-28494 
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-23T00:00:00.000Z
CVE-2022-28495 
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-24T00:00:00.000Z
CVE-2022-28496 
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-23T00:00:00.000Z
CVE-2022-28497 
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-23T00:00:00.000Z
CVE-2022-28505 
Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-03T16:35:38.000Z
CVE-2022-28506 
There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T12:53:01.000Z
CVE-2022-28507 
Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting (XSS) via Dragon path router admin page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-06T16:39:40.000Z
CVE-2022-28508 
An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T13:50:55.000Z
CVE-2022-28512 
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T14:26:58.000Z
CVE-2022-28521 
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:29:28.000Z
CVE-2022-28522 
ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:29:29.000Z
CVE-2022-28523 
HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:29:29.000Z
CVE-2022-28524 
ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:29:30.000Z
CVE-2022-28525 
ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edit_user&id=1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:29:30.000Z
CVE-2022-28527 
dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:29:31.000Z
CVE-2022-28528 
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-26T20:29:31.000Z
CVE-2022-28530 
Sourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via cmdcategory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T16:43:13.000Z
CVE-2022-28531 
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername (aka Username) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-20T18:29:02.000Z
CVE-2022-28533 
Sourcecodester Medical Hub Directory Site 1.0 is vulnerable to SQL Injection via /mhds/clinic/view_details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T16:24:05.000Z
CVE-2022-28541 
Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Samsung Mobile
product: Samsung Update
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Published: 2022-04-11T19:37:35.000Z
CVE-2022-28542 
Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Samsung Mobile
product: Galaxy Store
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Published: 2022-04-11T19:37:36.000Z
CVE-2022-28543 
Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permission.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Samsung Mobile
product: Samsung Flow
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2022-04-11T19:37:36.000Z
CVE-2022-28544 
Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Samsung Mobile
product: Galaxy Store
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
version: 3.1
Published: 2022-04-11T19:37:37.000Z
CVE-2022-28545 
FUDforum 3.1.1 is vulnerable to Stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-06T16:30:58.000Z
CVE-2022-28550 
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple `&i` or `&o` are given.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-13T00:00:00.000Z
CVE-2022-28552 
Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T14:52:17.000Z
CVE-2022-28556 
Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow. Similarly, this vulnerability can be used together with CVE-2021-44971
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T15:13:19.000Z
CVE-2022-28557 
There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T15:18:42.000Z
CVE-2022-28560 
There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attacker can obtain a stable shell through a carefully constructed payload
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-03T15:20:33.000Z
CVE-2022-28561 
There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router. An attacker can obtain a stable shell through a carefully constructed payload
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-03T15:21:47.000Z
CVE-2022-28568 
Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-04T14:32:16.000Z
CVE-2022-28571 
D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T12:35:00.000Z
CVE-2022-28572 
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T12:36:51.000Z
CVE-2022-28573 
D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the system_time_timezone parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T13:06:07.000Z
CVE-2022-28575 
It is found that there is a command injection vulnerability in the setopenvpnclientcfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows attackers to execute arbitrary commands through a carefully constructed payload
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T17:28:45.000Z
CVE-2022-28577 
It is found that there is a command injection vulnerability in the delParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T17:33:23.000Z
CVE-2022-28578 
It is found that there is a command injection vulnerability in the setOpenVpnCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T17:36:23.000Z
CVE-2022-28579 
It is found that there is a command injection vulnerability in the setParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T17:38:56.000Z
CVE-2022-28580 
It is found that there is a command injection vulnerability in the setL2tpServerCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T17:40:56.000Z
CVE-2022-28581 
It is found that there is a command injection vulnerability in the setWiFiAdvancedCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T17:42:41.000Z
CVE-2022-28582 
It is found that there is a command injection vulnerability in the setWiFiSignalCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T17:44:23.000Z
CVE-2022-28583 
It is found that there is a command injection vulnerability in the setWiFiWpsCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-05T17:47:15.000Z