Code execution vulnerability in SeaCMS backend (CNVD-2019-45340)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. A code execution vulnerability exists in the background of SeaCMS, which can be exploited by attackers to execute malicious code...

SQL injection vulnerability in SeaCMS backend (CNVD-2019-45354)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a SQL injection vulnerability in the background of SeaCMS, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in SeaCMS Backend (CNVD-2019-45196)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a SQL injection vulnerability in the background of SeaCMS, which can be exploited by attackers to obtain sensitive database information...

EulerOS 2.0 SP5 : gvfs (EulerOS-SA-2019-2156)

According to the version of the gvfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileg...

TYPO3 cross-site scripting vulnerability (CNVD-2019-41236)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the back-end search box in TYPO3 versions prior to 4.4.1. The vulnerability stems from a lack of proper validation of client-side data by the...

Default Express middleware security check is ignored in production

Default Express middleware security check is ignored in production Impact All Cube.js deployments that use affected versions of @cubejs-backend/api-gateway with default express authentication middleware in production environment are affected. Patches @cubejs-backend/[email protected] Workaround...

File Inclusion Vulnerability in MetInfo V7.0.0beta Backend

MetInfo is an open source and free CMS building system suitable for enterprise building, MetInfo enterprise website management system is mainly used to build enterprise websites, using PHP + Mysql architecture. MetInfo V7.0.0beta backend file containment vulnerability can be exploited by an...

SQL Injection Vulnerability in MyfCMS Backend at Adding New Posts

Min Yifei Content Management System, abbreviated MyfCMS, is a PHP+Mysql content management system. A SQL injection vulnerability exists in the backend of MyfCMS at Add New Article. An attacker can exploit the vulnerability to obtain sensitive database information...

TYPO3 cross-site scripting vulnerability (CNVD-2019-41241)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the backend of TYPO3. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

CVE-2011-4900

TYPO3 before 4.5.4 allows Information Disclosure in the backend...

CVE-2011-4627

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend...

Information disclosure

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend...

Information disclosure

TYPO3 before 4.5.4 allows Information Disclosure in the backend...

CVE-2011-4900

TYPO3 before 4.5.4 allows Information Disclosure in the backend...

CVE-2011-4627

TYPO3 Information Disclosure (CVE-2011-4627) affects TYPO3 core prior to versions: 4.3.12 and 4.4.x prior to 4.4.9 and 4.5.x prior to 4.5.4. The vulnerability allows backend information disclosure due to the underlying flaw described in the connected advisories. Connected documents confirm the is...

CVE-2011-4627

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend...

Weak password vulnerability in H3C ACG1000-M switches

Xinhua San Technologies Co., Ltd. has a full range of overall digital infrastructure capabilities in computing, storage, networking and security, and provides one-stop digital solutions, including cloud computing, big data, intelligent connectivity, information security, new security, Internet of...

Directory Traversal Vulnerability in MacCMS Backend

MacCMS is a cms website builder system. A directory traversal vulnerability exists in the MacCMS backend. It allows an attacker to traverse the directory and obtain sensitive directory and file information...

XML Entity Injection Vulnerability in zzzcms zzzphp Backend

zzzcms zzzphp is a content management system CMS. An XML entity injection vulnerability exists in the zzzcms zzzphp backend. An attacker can exploit the vulnerability to gain unauthorized access to files in arbitrary directories...

rhn-tools:1.0 bug fix and enhancement update

An update is available for osad, spacewalk-abrt, rhn-custom-info, rhncfg, spacewalk-koan, spacewalk-oscap, spacewalk-backend, rhn-virtualization, spacewalk-usix, rhnpush, spacewalk-client-cert, cobbler, spacewalk-remote-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring Syst...