CVE-2021-41460

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-41460

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

Sql injection

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-41460

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

WUZHI CMS 跨站脚本漏洞

WUZHI CMS is a set of five fingers WUZHI company based on PHP and MySQL open source content management system CMS. A security vulnerability exists in WUZHI CMS version v4.1.0. A remote attacker can exploit this vulnerability to execute arbitrary web script or HTML via the imgurl parameter...

WUZHI CMS SQL注入漏洞

WUZHI CMS is a PHP and MySQL-based open source content management system CMS from WUZHI. v4.1.0 of WUZHI CMS is vulnerable to SQL injection, which can be exploited to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php. parameter in...

Lenovo Smart Standby Driver 安全漏洞

Lenovo Smart Standby Driver is a software from the Chinese company Lenovo that is used to control the hibernation of a computer. A security vulnerability exists in Lenovo Smart Standby Driver prior to version 4.1.50.0, which stems from the presence of a buffer overflow vulnerability. An attacker...

GHSA-7MJ4-2984-955F Withdrawn Advisory: AlchemyCMS is vulnerable to stored XSS via the /admin/pictures image field

Withdrawn Advisory This advisory has been withdrawn because it does not describe a vulnerability. The maintainer states the following: The researcher used an authorized cookie to perform the request to a password-protected route. Without that session cookie, the request would have been rejected a...

Apache Tomcat Path Traversal Vulnerability

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. d...

GHSA-6J8F-66VH-39MJ Apache Tomcat Mishandles Character Sequence in Cookies

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the " character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks...

CVE-2020-35522 affecting package libtiff for versions less than 4.1.0-3

CVE-2020-35522 affecting package libtiff for versions less than 4.1.0-3. A patched version of the package is available...

CVE-2022-0561 affecting package libtiff 4.1.0-3

CVE-2022-0561 affecting package libtiff 4.1.0-3. A patched version of the package is available...

CVE-2022-0562 affecting package libtiff 4.1.0-3

CVE-2022-0562 affecting package libtiff 4.1.0-3. A patched version of the package is available...

Path Traversal within joomla/archive tar class

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path...

Joomla! Cross-site scripting vulnerability (CNVD-2022-64103)

Joomla! is a set of forum components used in the Joomla! content management system. 4.0.0 to 4.1.0 versions of Joomla! have a cross-site scripting vulnerability that stems from a filter that incorrectly cleans up and escapes the content in the code, which can be exploited by attackers to execute...

Joomla! SQL Injection Vulnerability (CNVD-2022-64102)

Joomla! is a set of forum components used in the Joomla! content management system. SQL injection vulnerabilities exist in versions 3.0.0 through 3.10.6 and 4.0.0 through 4.1.0. The vulnerability stems from the application's lack of validation of externally entered SQL statements. An attacker cou...

Joomla! input validation error vulnerability (CNVD-2022-64098)

Joomla! is a set of forum components used in the Joomla! content management system. versions 2.5.0 to 3.10.6 and 4.0.0 to 4.1.0 contain an input validation error vulnerability that can be exploited by attackers to invalidate the check of whether the redirected url is internal, possibly leading to...

Joomla! 4.0.0 - 4.1.0 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

Path traversal

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path...

Sql injection

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate filtering on the selected Ids on an request could resulted into an possible SQL injection...