CVE-2021-36096

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions...

CVE-2021-36096 Support Bundle includes S/Mime and PGP secret or PIN

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions...

CVE-2021-36096: Exposure of Sensitive Information to an Unauthorized Actor

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions...

PT-2021-21116

Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 and later OTRS AG OTRS versions 7.0.28 and prior OTRS AG OTRS versions 8.0.15 and prior Description: The issue is related to Generated Support Bundles containing private S/MIME and PGP keys if the...

SUSE: Security Advisory (SUSE-SU-2021:2917-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

S-CMS SQL Injection Vulnerability (CNVD-2021-93907)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. a SQL injection vulnerability exists in the 4.edu.phpconnfunction.php component of S-CMS version 1.0. An attacker can use this vulnerability to access sensitive...

CVE-2020-20340

A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...

CVE-2020-20340

A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...

Sql injection

A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...

CVE-2020-20340

CVE-2020-20340 affects S-CMS v1.0, where a SQL injection flaw in the 4.edu.phpconnfunction.php component exposes sensitive database information. Connected sources corroborate the issue in S-CMS, linking the vulnerability to the 4.edu.phpconnfunction.php path and version 1.0. The root cause is uns...

CVE-2020-20340

A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...

PT-2021-10477

Name of the Vulnerable Software and Affected Versions: S-CMS version 1.0 Description: A SQL injection issue in the 4.edu.phpconnfunction.php component allows attackers to access sensitive database information. Recommendations: For S-CMS version 1.0, consider restricting access to the 4.edu.php...

S-CMS SQL注入漏洞

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. a SQL injection vulnerability exists in the 4.edu.phpconnfunction.php component of S-CMS version 1.0. An attacker can use this vulnerability to access sensitive...

CVE-2020-20340: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...

OpenSSL: DoS Vulnerability (CVE-2006-7250) - Linux

OpenSSL is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

CVE-2020-19046

Cross Site Scripting XSS in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='...

Cross site scripting

Cross Site Scripting XSS in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='...

CVE-2020-19046

CVE-2020-19046 concerns a cross-site scripting (XSS) vulnerability in S-CMS v1.0. The issue is triggered via the component “/admin/tpl.php?page=”, allowing remote attackers to execute arbitrary code. The available connected sources consistently describe the vulnerability as an XSS in S-CMS v1.0 w...

PT-2021-10275

Name of the Vulnerable Software and Affected Versions: S-CMS version 1.0 Description: The issue allows remote attackers to execute arbitrary code via the component "/admin/tpl.php?page=". This is a Cross Site Scripting XSS issue. Recommendations: For S-CMS version 1.0, consider restricting access...

CVE-2020-19046: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='...