Cross site scripting

index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name...

CVE-2018-17129

MetInfo 6.1.0 has SQL injection in doexport in app/system/feedback/admin/feedbackadmin.class.php via the class1 field...

SQL injection vulnerability in admin.class.php page of UQCMS Cloud B2B2C multi-store system

UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. UQCMS cloud business B2B2C multi-store system admin.class.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in admin.class.php file of UQCMS Cloud B2B2C multi-store system

UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. UQCMS cloud business B2B2C multi-store system admin.class.php file SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in UQCMS Mall System admin.class.php Page

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. UQCMS cloud business system admin.class.php page SQL injection vulnerability, the vulnerability stems from the program does not adequately filter the input submitted...

singapore v0.9.11 cross site scripting and path disclosure

Because of singapores heavy use of classes it has multiple path disclosure occurences. The following pages all produced class related errors when navigating directly to them in your browser. gallery/includes/admin.class.php templates/admindefault/ all the .tpl.php files templates/default/ all the...