Code execution vulnerability in seacms backend

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a code execution vulnerability in the backend of seacms, which can be exploited by attackers to execute malicious code...

SQL injection vulnerability in oceancms backend ad***_pa***.php file

Ocean CMS is a video-on-demand system. Ocean cms background adpa.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

Command Execution Vulnerability in PbootCMS V2.0.3 Backend

PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system , is a set of free commercial PHP CMS source code , to meet the needs of enterprise website development and construction . A command execution vulnerability exists in the...

openSUSE Security Update : opera (openSUSE-2019-2107)

This update for opera fixes the following issues : Opera was updated to version 63.0.3368.66 : - CHR-7525 Update chromium on desktop-stable-76-3368 to 76.0.3809.132 - DNA-74031 Download indicator doesnt match progress - DNA-77042 Something went wrong message in crypto wallet in private window -...

Command Execution Vulnerability in EyouCms Backend

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms backend command execution vulnerability , attackers can use the vulnerability to modify the template at the existence of getshell vulnerability , you can execute any PHP code...

5iSNS Content Payment System 1.0.9 suffers from XSS vulnerability

The 5iSNS content payment system integrates functional modules such as post articles and documents with social features. An XSS vulnerability exists in 5iSNS Paid-for-Content System 1.0.9, which can be exploited by an attacker to obtain administrator cookie information and log into the backend of...

File Upload Vulnerability in HisiPHP v2.0.10 Backend

HisiPHP is a ThinkPHP5.1 + Layui based development of a general-purpose back-end management framework , the default integration of permissions management , module management , plug-in management , hooks management , database management and other commonly used functions . HisiPHP v2.0.10 file uplo...

Login Bypass Vulnerability in the Integrated Reservoir Management Information System of Yangtze River Surveying, Planning and Designing Research Co.

The Yangtze River Survey, Planning, Design and Research Co., Ltd. is a science and technology-oriented enterprise engaged in engineering survey, planning, design, scientific research, consulting, construction supervision and management and general contracting business. There is a login bypass...

SQL injection vulnerability in emlog backend wi***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. There is a SQL injection vulnerability in the backend wi.php page of emlog, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in emlog backend na***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. SQL injection vulnerability exists in the background na.php page of emlog, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in emlog backend co***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. There is a SQL injection vulnerability in the co.php page of emlog, which can be exploited by attackers to obtain sensitive database information...

Codecat - Tool To Help In Manual Analysis In Codereview

CodeCat is a open source tool to help you in codereview, to find/track sinks and this points follow regex rules... How too install, step by step: Go to CodeCat directory, install backend and frontend libs: $ cd Front $ sudo python3 -m pip install -r requirements.txt $ cd .. $ cd Backend $ sudo...

SQL injection vulnerability in X5music V2.0 backend cl***.php page

x5music Free Edition is an audio-visual management system developed using php+Mysql. X5music V2.0 backend cl.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

EulerOS Virtualization for ARM 64 3.0.2.0 : gcc (EulerOS-SA-2019-2308)

According to the version of the gcc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - This is compiler for arm64. Security Fixes:The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimiz...

CVE-2019-19316

When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...

Design/Logic Flaw

When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...

CVE-2019-19316

When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...

SQL injection vulnerability in the background of zzphp website builder system

zzcms is a free website builder developed in asp language. There are SQL injection vulnerabilities in the backend of zzzzphp website builder system, which can be exploited by attackers to obtain sensitive information from the database...

PT-2019-15807 · Hashicorp +1 · Terraform +1

Name of the Vulnerable Software and Affected Versions: Terraform versions prior to 0.12.17 Description: The issue concerns the transmission of sensitive data in cleartext HTTP when using the Azure backend with a shared access signature SAS in Terraform. This affects the...

SQL injection vulnerability in the Ta***.cl***.php file in the backend of Dream CMS

Dream CMS short for "lmxcms" is an open source website management system cms with no license restrictions. A SQL injection vulnerability exists in the Ta.cl.php file in the background of Dream CMS. Attackers can use the vulnerability to obtain sensitive database information...