325 matches found
CVE-2019-7587
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
CVE-2019-7587
CVE-2019-7587 affects Bo-blog Wind through 1.6.0-r. The vulnerability is a SQL Injection in the admin.php/comments/batchdel/ comID parameter, caused by mishandling in the mode/admin.mode.php delBlockedBatch function. The connected sources corroborate the issue and describe it as a SQL injection v...
CVE-2019-7587
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
SQL Injection Vulnerability in HuCart bo***.php Page
HuCart HuCart is an open source enterprise building system. HuCart version 5.7.4 bo.php page SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain database sensitive information...
CVE-2018-2483
HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console CMC by changing request method...
CVE-2018-11247
The JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component, which allows remote attackers to execute arbitrary code via a session on port 81...
CVE-2018-11247
The JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component, which allows remote attackers to execute arbitrary code via a session on port 81...
Cockpit CMS 0.4.4-0.5.5 - Server-Side Request Forgery Vulnerability
Exploit for php platform in category web applications SSRF（Server Side Request Forgery） in Cockpit 0.4.4-0.5.5 CVE-2018-9302 Cockpit CMS repairs CVE-2017-14611, but it can be bypassed, SSRF still exist, affecting the Cockpit CMS 0.4.4-0.5.5 versions.I've been tested success of "Cockpit CMS" laste...
Cockpit CMS 0.4.4 0.5.5 - Server-Side Request Forgery
Cockpit CMS 0.4.4 0.5.5 - Server-Side Request Forgery SSRF（Server Side Request Forgery） in Cockpit 0.4.4-0.5.5 CVE-2018-9302 Cockpit CMS repairs CVE-2017-14611, but it can be bypassed, SSRF still exist, affecting the Cockpit CMS 0.4.4-0.5.5 versions.I've been tested success of "Cockpit CMS" laste...
Cockpit CMS 0.13.0 Server Side Request Forgery Vulnerability
Cockpit CMS version 0.13.0 suffers from a server-side request forgery vulnerability. SSRFPS"Server Side Request ForgeryPSc in Cockpit CMS 0.13.0 CVE-2017-14611 The Cockpit CMS is awesome if you need a flexible content structure but don't want to be limited in how to use the content. Product...
Onethink CMS Server Side Request Forgery
SSRFPS"Server Side Request ForgeryPSc in Onethink All version CVE-2017-14323 The Onethink is an open source CMSContent Management System.This system is based on the Thinkphp3.2 development framework. Product Download: http://www.onethink.cn Vulnerability TypePSoSSRFPS"Server Side Request ForgeryP...
bo-vs.ch XSS vulnerability
Open Bug Bounty ID: OBB-524259 Description| Value ---|--- Affected Website:| bo-vs.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Skip-Bo™ Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Skip-Bo™ Free published at the 'play' market has multiple vulnerabilities...
Bo-Blog 2.1.1 usergroup参数 跨站脚本攻击漏洞
No description provided by source...
Bo-blog 2.1.1 xmlrpc.php 上传漏洞
No description provided by source...
Qi Bo CMS variable overwrite vulnerability exp-vulnerability warning-the black bar safety net
Vulnerability of specific analysis in the http://security.alibaba.com/blog/blog.htm?spm=0.0.0.0.AooULy&id=1 3, The following published what I wrote of the exploits and exp. Use the following steps: （1）The first visit/member below the“comment management”function, the capture （2）in the http request...
Qi Bo cms all products are proof there is a back door, please the majority of users attention-vulnerability warning-the black bar safety net
According to the white hats in a vulnerability on the platform submitted to the loopholes of the display, the well-known open-source program qibocms all products have been added to the back door. ! /Article/UploadPic/2015-3/2 0 1 5 3 2 5 1 1 4 1 3 1 8 6 0. png According to the features prior to...
某图书管理系统存在通用型SQL注入漏洞
简要描述： ... 详细说明： 系统名称：博云非书资料管理系统 厂商信息：杭州麦达电子有限公司版权所有 该系统有个特别 高大上 的功能：“云中心查找”功能 恰好这个查找的链接的参数存在sql注入漏洞，且该功能无需登录。 百度搜索：inurl:poweb 非书资料管理系统 罗嗦到这里，看证明吧 -------------------------------- 下面的漏洞证明，直接给出“云中心查找”功能得出链接（只要是该系统，都存在查找的功能，且无需登陆到系统中），链接类似于...
Dennis Fisher and Mike Mimoso Discuss the Target Data Breach and More
Dennis Fisher and Mike Mimoso discuss the news of the weird in the security industry since the holidays, including the latest revelations about the Target data breach and the decision by some speakers to boycott the RSA Conference because of the NSA revelations. Target image via imprint777‘s Flic...