10883 matches found
CVE-2010-3661
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend...
CVE-2010-3660
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend...
Open redirect
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend...
Cross site scripting
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend...
CVE-2010-3661
CVE-2010-3661 corresponds to TYPO3 Open Redirection on the backend. The affected scope includes TYPO3 versions prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4, and 4.4.x prior to 4.4.1. The root cause is an open redirect in the backend, which could permit redirection to an arbitrary ...
CVE-2010-3660
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend...
SQL Injection Vulnerability in BlueCMS Backend
BlueCMS is a professional local portal system developed by open source combination of PHP + MYSQL, focusing on local portal CMS. BlueCMS background SQL injection vulnerability , attackers can exploit the vulnerability to obtain database information...
DEBIAN-CVE-2018-21029
systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication SNI is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname...
CVE-2018-21029
systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication SNI is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname...
SQL Injection Vulnerability in JTopCMS Backend Management System
JTopCMS is a JavaEE-based standards , for the management of site content of the open-source Web site management system CMS, can efficiently and conveniently site document collection , audit , page template production. JTopCMS backend management system SQL injection vulnerability , attackers can u...
PT-2019-10455 · Systemd +1 · Systemd +1
Name of the Vulnerable Software and Affected Versions: systemd versions 239 through 245 Description: The issue concerns the acceptance of any certificate signed by a trusted certificate authority for DNS Over TLS, without sending Server Name Indication SNI and without hostname validation when usi...
zzzphp V1.7.4 SQL Injection Vulnerability in Backend
zzphp is a free website builder developed in PHP language. zzzphp V1.7.4 suffers from a SQL injection vulnerability in the backend, which can be exploited by attackers to obtain sensitive information...
Waychar enrollment system has a flawed logic vulnerability
Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar enrollment system has a logic flaw vulnerability that can be exploited by an attacker to bypass authentication and gain direct access to the backend management system...
Code execution vulnerability in ad***_we***.php file ur*** parameter in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adwe.php file ur parameter there is a code execution vulnerability, attackers can use the vulnerability to obtain control of the web server...
SQL injection vulnerability in seacms backend ad***_me***.php file
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adme.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in seacms backend ad***_jq***.php file ed*** method
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adjq.php file ed method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in ad***_jq***.php file de*** method in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adjq.php file de method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in seacms backend ad***_pa***.php file
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adpa.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in ad***_ne***.php file mo*** parameters in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file mo parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in ps*** method of seacms backend ad***_ne***.php file
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file ps method exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...