10867 matches found
SQL Injection Vulnerability in iwebsns Backend of Jinan Digital Open Network Technology Co.
iWebSNS, a new generation of SNS software based on a full marketing technology architecture system, is built on the new LAMP marketing CMS development framework. There is a SQL injection vulnerability in the background of iwebsns of Jinan Digital Open Network Technology Co., Ltd. which can be...
File Upload Vulnerability in MetInfo Backend
MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo backend file upload vulnerability can be exploited by attackers to upload malicious files and obtain site administration privileges...
SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25102)
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ZZCMS team's backend ztse.php file, which can be exploited by an attacker to obtain sensitive information from the database...
SQL Injection Vulnerability in ZZCMS Backend de***.php File
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the de.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in ZZCMS Backend dl_se***l.php File
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the dlsel.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in ZZCMS Backend ba***.php File
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ba.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in ZZCMS Backend dl_se***.php Page
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the dlse.php page in the background of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25324)
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ztse.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
Arbitrary File Read Vulnerability in the Background of Feifei Movie Navigation System
Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. An arbitrary file read vulnerability exists in the background of Feifei Movie & TV Navigation System, which can be exploited by attackers to compromise confidentiality...
Arbitrary File Deletion Vulnerability in the Backend of Feifei Movie Navigation System (CNVD-2020-25318)
Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. Feifei Movie and TV navigation system background there are arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any file server...
SQL Injection Vulnerability in ZZCMS Backend zt***_se***.php File
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ztse.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
File Upload Vulnerability in Extreme CMS Backend
Extreme CMS is open source and free PHPCMS web content management system. There is a file upload vulnerability in the backend of Extreme CMS, which can be exploited by attackers to upload malicious files and gain administrative privileges on the server...
CVE-2019-19094
Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...
Sql injection
Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...
CVE-2019-19094 ABB eSOMS: SQL injection vulnerability
Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...
Command Execution Vulnerability in YKCMS v5 Backend Rule Management System
YKCMS5 is a film and television system specifically tailored for film and television collection. YKCMS v5 backend rules management system has a command execution vulnerability that can be exploited by attackers to obtain web server administrator privileges...
CVE-2019-11459
The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...
Denial Of Service (DoS)
nbdkit is vulnerable to denial of service. The vulnerability exists due to the premature opening of back-end connection...
Apache -- Multiple vulnerabilities
Apache Team reports: SECURITY: CVE-2020-1934 modproxyftp: Use of uninitialized value with malicious backend FTP server. SECURITY: CVE-2020-1927 rewrite, core: Set PCREDOTALL flag by default to avoid unpredictable matches and substitutions with encoded line break characters. The fix for...
SQL Injection Vulnerability in the backend of Phaidron cms
Phoenitron CMS is a set of rapid website building program developed by Phoenitron Network, which is suitable for small and medium-sized enterprises and individuals to build their own websites quickly. SQL injection vulnerability exists in the backend of Phaidron CMS, which can be exploited by...