CVE-2018-14973

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS...

File upload vulnerability in phpComasy CMS system

phpComasy CMS is a foreign open source content management system, with simple and fast, scalable, is the ideal system for small and medium-sized websites. phpcomasy v2.1.1 A file upload vulnerability exists in the phpcomasy\classes\class.filemanager.php file, which allows an attacker to upload a...

PT-2018-8388 · Red Hat +1 · Spacewalk-Channel +1

Name of the Vulnerable Software and Affected Versions: spacewalk-channel affected versions not specified Description: An issue was found in spacewalk-channel where a non-admin user or disabled users can perform administrative tasks due to an incorrect authorization check in the...

Arbitrary File Traversal Vulnerability in Ampcom Application Gateway

Ambient Application Gateway is an inter-network device developed by Beijing Ambient Technology Co., Ltd. to interconnect one network with another and provide specific applications. An arbitrary file traversal vulnerability exists in the ABT Application Gateway. An attacker can use user-controllab...

Horde Groupware Webmail Remote Command Execution Vulnerability

Horde Groupware Webmail is a product of Horde USA and is a free enterprise browser based on the Communication Suite. A remote code execution vulnerability exists in the file "/Horde/Crypt/Pgp/Backend/Binary.php" in Horde Groupware Webmail versions 3/4/5. An attacker can exploit this vulnerability...

KingTop CMS -- Tupy Technology Backend File Upload Vulnerability

KingTop CMS is a set of easy to learn , simple operation of the open source content management system . KingTop CMS -- Tupy Technology backend file upload vulnerability , attackers can upload webshell through the vulnerability , so as to obtain sensitive information...

Espcms V5.6.13.04.22 UTF8 正式版后台逻辑验证错误漏洞之2/N

简要描述： 系统后台权限逻辑校验存在问题，导致后台某模块功能被绕过和非授权访问 详细说明： 后台管理员权限校验在文件\public\classconnector.php: function adminpurview if $this-fun-accept'archive', 'R' == 'filemanage' && $this-fun-accept'action', 'R' == 'batupfilesave' $ecispadmininfo = $this-fun-accept'ecispadmininfo', 'G'; $esppowerlist =...

Fyblogs website management system vulnerability-vulnerability warning-the black bar safety net

Vulnerability type: unauthorized access/permissions bypass Brief description: Fyblogs site management system,, the background presence of the Universal password, the back-end file management presence of the bypass. Lead to browse to where the letter information. Information leaked! Detailed...