Lucene search
+L

10883 matches found

NVD
NVD
added 2019/11/01 6:15 p.m.25 views

CVE-2010-3661

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend...

6.1CVSS6.2AI score0.00903EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2019/11/01 6:15 p.m.19 views

CVE-2010-3660

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend...

5.4CVSS6.1AI score0.00784EPSS
SaveExploits0References1
Prion
Prion
added 2019/11/01 6:15 p.m.14 views

Open redirect

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend...

5.8CVSS7.1AI score0.00903EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2019/11/01 6:15 p.m.19 views

Cross site scripting

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend...

3.5CVSS6.2AI score0.00784EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2019/11/01 5:26 p.m.169 views

CVE-2010-3661

CVE-2010-3661 corresponds to TYPO3 Open Redirection on the backend. The affected scope includes TYPO3 versions prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4, and 4.4.x prior to 4.4.1. The root cause is an open redirect in the backend, which could permit redirection to an arbitrary ...

6.1CVSS6.4AI score0.00903EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/11/01 5:16 p.m.31 views

CVE-2010-3660

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend...

6AI score0.00784EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/11/01 12:00 a.m.4 views

SQL Injection Vulnerability in BlueCMS Backend

BlueCMS is a professional local portal system developed by open source combination of PHP + MYSQL, focusing on local portal CMS. BlueCMS background SQL injection vulnerability , attackers can exploit the vulnerability to obtain database information...

7.6AI score
SaveExploits0
OSV
OSV
added 2019/10/30 10:15 p.m.11 views

DEBIAN-CVE-2018-21029

systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication SNI is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname...

9.8CVSS6.8AI score0.03138EPSS
SaveExploits1References1
OSV
OSV
added 2019/10/30 10:15 p.m.11 views

CVE-2018-21029

systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication SNI is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname...

9.8CVSS6.6AI score
SaveExploits0References9
CNVD
CNVD
added 2019/10/30 12:00 a.m.3 views

SQL Injection Vulnerability in JTopCMS Backend Management System

JTopCMS is a JavaEE-based standards , for the management of site content of the open-source Web site management system CMS, can efficiently and conveniently site document collection , audit , page template production. JTopCMS backend management system SQL injection vulnerability , attackers can u...

7.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2019/10/30 12:00 a.m.8 views

PT-2019-10455 · Systemd +1 · Systemd +1

Name of the Vulnerable Software and Affected Versions: systemd versions 239 through 245 Description: The issue concerns the acceptance of any certificate signed by a trusted certificate authority for DNS Over TLS, without sending Server Name Indication SNI and without hostname validation when usi...

9.8CVSS6.3AI score0.54837EPSS
SaveExploits35References42
CNVD
CNVD
added 2019/10/29 12:00 a.m.5 views

zzzphp V1.7.4 SQL Injection Vulnerability in Backend

zzphp is a free website builder developed in PHP language. zzzphp V1.7.4 suffers from a SQL injection vulnerability in the backend, which can be exploited by attackers to obtain sensitive information...

8AI score
SaveExploits0
CNVD
CNVD
added 2019/10/29 12:00 a.m.4 views

Waychar enrollment system has a flawed logic vulnerability

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar enrollment system has a logic flaw vulnerability that can be exploited by an attacker to bypass authentication and gain direct access to the backend management system...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:00 a.m.6 views

Code execution vulnerability in ad***_we***.php file ur*** parameter in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adwe.php file ur parameter there is a code execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:00 a.m.3 views

SQL injection vulnerability in seacms backend ad***_me***.php file

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adme.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

8AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:00 a.m.4 views

SQL injection vulnerability in seacms backend ad***_jq***.php file ed*** method

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adjq.php file ed method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:00 a.m.6 views

SQL injection vulnerability in ad***_jq***.php file de*** method in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adjq.php file de method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:00 a.m.4 views

SQL injection vulnerability in seacms backend ad***_pa***.php file

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adpa.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

8AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:00 a.m.5 views

SQL injection vulnerability in ad***_ne***.php file mo*** parameters in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file mo parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

8AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:00 a.m.4 views

SQL injection vulnerability in ps*** method of seacms backend ad***_ne***.php file

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file ps method exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

8AI score
SaveExploits0
Rows per page
Query Builder