Online Thesis Archiving System SQL注入漏洞

Online Thesis Archiving System is Sourcecodester open source provides an online platform to store students' theses or capstone projects. sourcecodester Online Thesis Archiving System is vulnerable to SQL injection in v1.0, which stems from a lack of validation of externally entered SQL statements...

CVE-2021-45334

CVE-2021-45334 affects Sourcecodester Online Thesis Archiving System 1.0. Multiple connected sources describe a SQL Injection vulnerability in this product, caused by insufficient validation of externally supplied SQL statements in the application. The vulnerability can enable bypass of admin aut...

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

Online Thesis Archiving System 1.0 - SQL injection Authentication Bypass Vulnerability

Exploit Title: Online Thesis Archiving System 1.0 - SQLi Authentication Bypass Exploit Author: Yehia Elghaly YME Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15083/online-thesis-archiving-system-using-phpoop-free-source-code.html Version: Onli...

Online Thesis Archiving System 1.0 - SQLi Authentication Bypass

Exploit Title: Online Thesis Archiving System 1.0 - SQLi Authentication Bypass Exploit Author: Yehia Elghaly YME Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15083/online-thesis-archiving-system-using-phpoop-free-source-code.html Version: Onli...

Online Thesis Archiving System 1.0 SQL Injection / Cross Site Scripting

Exploit Title: Online Thesis Archiving System 1.0 - SQLi Authentication Bypass & Stored XSS Exploit Author: Yehia Elghaly YME Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15083/online-thesis-archiving-system-using-phpoop-free-source-code.html...

CVE-2021-31850

A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...

CVE-2021-31850

A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...

CVE-2021-31850 Denial of Service in Database Security on Windows

A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...

Mcafee Database Security Server 安全漏洞

Mcafee Database Security Server is a database security software from Mcafee USA. The software provides users with a holistic view of their databases and the corresponding security status, protecting business-critical databases from external, internal and insider database threats in real time. A...

[SECURITY] Fedora 35 Update: mingw-speex-1.2.0-9.fc35

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates in the 2-45 kbps range. Possible applications include Voice over IP VoIP, Internet audio streaming, audio books, and archiving of speech data e.g. voice mail...

SUSE: Security Advisory (SUSE-SU-2021:2834-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Github pywb 跨站脚本漏洞

Github pywb is a Python 2 and 3 web archiving toolkit for replaying large and small web archives as accurately as possible. A security vulnerability exists in Webrecorder pywb versions prior to 2.6.0, which stems from the fact that the affected product does not ensure that Jinja2 templates are...

CVE-2021-0539

In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

SUSE: Security Advisory (SUSE-SU-2018:0862-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PUB-A-180419673

In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a permissions licensing and access control issue, which arises from an application not properly imposing security restrictions in the archiving utility. The following...

Information Disclosure Vulnerability in MessageSolution's Enterprise Email Archive Management System EEA

MessageSolution is a series of unstructured data archiving products such as email archiving, mail archiving, document archiving, SharePoint archiving and backup management, Domino document archiving, and mail archiving system SME edition can help users manage their emails and electronic data...

MessageSolution 邮件归档系统EEA 信息泄露漏洞（CNVD-2021-10543）

...

The vulnerability of the archiving function of the Cisco DNA Center allows a intruder to gain unauthorized access to protected information.

The vulnerability of the archiving function of the Cisco DNA Center relates to the unencrypted storage of confidential information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...