Combodo iTop 跨站请求伪造漏洞

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management, and problem management functionality. A cross-site request forgery vulnerability...

Combodo iTop 代码注入漏洞

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management. A code injection vulnerability exists in Combodo iTop...

WordPress Ultimeter plugin < 2.7.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ultimeter plugin versions 2.7.6. Solution Update the WordPress Ultimeter plugin to the latest available version at least 2.7.6...

GHSA-WHWW-V56C-CGV2 Deserialization of Untrusted Data in Apache Dubbo

This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will execute some malicious code. More detai...

CVE-2021-32764

Discourse is an open-source discussion platform. In Discourse versions 2.7.5 and prior, parsing and rendering of YouTube Oneboxes can be susceptible to XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse's default Content Security Policy. The issue is...

Denial Of Service (DoS)

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

ECShop SQL Injection Vulnerability (CNVD-2021-44947)

ECShop is a professional e-commerce mall system. A SQL injection vulnerability exists in ECShop version 2.7.6. An attacker can exploit this vulnerability by using the goodsnumber parameter of flow.php to conduct a SQL injection attack...

CVE-2020-22204

SQL Injection in ECShop 2.7.6 via the goodsnumber parameter to flow.php...

Sql injection

SQL Injection in ECShop 2.7.6 via the goodsnumber parameter to flow.php...

CVE-2020-22204

CVE-2020-22204 describes a SQL injection vulnerability in ECShop 2.7.6 exploitable via the goods_number parameter of flow.php. The included connected sources (CNVD/CNNVD/NVD entries) confirm ECShop 2.7.6 is affected and that the injection occurs through a poorly sanitized goods_number parameter. ...

CVE-2020-22204

SQL Injection in ECShop 2.7.6 via the goodsnumber parameter to flow.php...

ECShop SQL注入漏洞

ECShop is a professional e-commerce mall system. A SQL injection vulnerability exists in ECShop version 2.7.6. An attacker can exploit this vulnerability by using the goodsnumber parameter of flow.php to conduct a SQL injection attack...

SUSE: Security Advisory (SUSE-SU-2018:4128-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BigBlueButton Greenlight Cross-Site Scripting Vulnerability

BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A cross-site scripting vulnerability exists in BigBlueButton Greenlight version 2.7.6, which stems from a cross-site scripting XSS vulnerability in the "merge account" function of admin .js. No details of t...

CVE-2020-27642

A cross-site scripting XSS vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6...

CVE-2018-20969 affecting package patch 2.7.6-7

CVE-2018-20969 affecting package patch 2.7.6-7. A patched version of the package is available...

CVE-2018-6952 affecting package patch 2.7.6-7

CVE-2018-6952 affecting package patch 2.7.6-7. A patched version of the package is available...

CVE-2019-13638 affecting package patch 2.7.6-7

CVE-2019-13638 affecting package patch 2.7.6-7. A patched version of the package is available...

CVE-2018-1000156 affecting package patch 2.7.6-7

CVE-2018-1000156 affecting package patch 2.7.6-7. A patched version of the package is available...

GNU patch resource management error vulnerability

GNU patch is a set of tools from the GNU Project for generating patch files. A resource management error vulnerability exists in the 'anotherhunk' function of the pch.c file in GNU patch 2.7.6 and earlier. An attacker can exploit this vulnerability to cause a denial of service with a specially...