10831 matches found
SQL Injection Vulnerability in rpcms Backend
rpcms a lightweight php content management system , can be a blog system , enterprise website system , information system . It is small , lightweight , but feature-rich , scalable . rpcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database...
SQL Injection Vulnerability in Dynamic Ring Monitoring Backend System of Guangzhou Kingston Electronic Technology Co.
Guangzhou Kingston Electronic Technology Co., Ltd. is a high-tech company integrating R&D, production and sales. Guangzhou Kingston Electronic Technology Co., Ltd. dynamic ring monitoring backend system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive informati...
SUSE: Security Advisory (SUSE-SU-2018:2162-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
File upload vulnerability in AKCMS backend
AKCMS is the most famous lightweight CMS builder in China. There is a file upload vulnerability in AKCMS backend, which can be exploited by attackers to gain control of the server...
SQL Injection Vulnerability in myeye Backend Management
Myeye is a monitoring and control system. A SQL injection vulnerability exists in the backend administration of Myeye, which can be exploited by an attacker to obtain sensitive information from the database...
Command execution vulnerability in kiteCMS backend
KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development, applicable to individuals and enterprises to quickly build stations and development needs. kiteCMS backend command execution vulnerability , attackers can exploit t...
Huawei S9306 suffers from weak password vulnerability
The S9306 is a routing switch, POE switch. Huawei S9306 has a weak password vulnerability. An attacker uses the weak password to log into the backend and obtain sensitive information...
Debian DLA-2610-1 : linux-4.19 security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service, or information leaks. CVE-2020-27170, CVE-2020-27171 Piotr Krysiuk discovered flaws in the BPF subsystem's checks for information leaks throu...
Command Execution Vulnerability in Weiphp Backend
WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. A command execution vulnerability exists in the Weiphp backend. Attackers can use the vulnerability to obtain server privileges...
Unauthorized access vulnerability in x-admin backend management system
X-admin is based on layui's lightweight front-end backend management framework. An unauthorized access vulnerability exists in the x-admin backend management system, which can be exploited by attackers to obtain sensitive information...
TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2021-007)
TYPO3 is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; if...
CVE-2021-29271
remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: LocatorURL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go...
Cross site scripting
remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: LocatorURL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go...
SQL Injection Vulnerability in IP Webcast Backend Management System of Guangzhou Paulun Electronics Co.
Ltd. is a brand that specializes in the research, development and production of sound, light and video system integration equipment. There is a SQL injection vulnerability in the background management system of IP network broadcasting of Guangzhou Paulun Electronic Co., Ltd, which can be exploite...
Weak Password Vulnerability in Various Gateways of Mapleton Technology Co.
Mapletree Technology Co., Ltd. is a leading provider of network products and solutions in China. A weak password vulnerability exists in a number of MyPlus Technology's gateways, which can be exploited by an attacker to log in to the backend and obtain sensitive information...
File Upload Vulnerability in UCMS Backend
UCMS is a simple open source content management system. A file upload vulnerability exists in the UCMS backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...
Logical flaws exist in the usb server management system of Beijing Shengxun Meiheng Technology Development Co.
Beijing Shengxun Meiheng Technology Development Co., Ltd. is a young technology innovation company. There is a logic flaw vulnerability in the usb server management system of Beijing Shengxun Meiheng Technology Development Co., Ltd, which can be exploited by attackers to bypass login and enter th...
Cross-site Scripting (XSS)
typo3/cms-backend is vulnerable to cross-site scripting. An authenticated malicious user is able to inject and execute malicious script via the content elements of type menu when their referenced items get previewed in the page module...
SQL Injection Vulnerability in Ke361 Backend Di***.cl***.php
Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modular, driven and...