10883 matches found
Information Disclosure in extension "Direct Mail" (direct_mail)
A missing access check in the backend module of the extension allows a backend user without access to configured tables e.g. feusers, ttaddress to view and export data of users subscribed to a newsletter...
SQL Injection Vulnerability in ASK2 Q&A System Backend B***l.php Page
ASK2 Q&A system belongs to the Beijing Zhengying Network Technology Co., Ltd. products , is a set of open source php Q&A system , integration of paid Q&A system , paid voice Q&A system . ASK2 Q&A system background Bl.php page there is a SQL injection vulnerability , attackers can use the...
SQL injection vulnerability in seacms backend ad***_co***_ne***.php page (CNVD-2019-41063)
seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. seacms background adcone.php page SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...
Code execution vulnerability in HkCMS backend Ad***.php file
HkCMS is a free and open source content management system, the core of the Thinkphp5.0 framework and many other open source software, has been committed to providing free and open source content management system for enterprise building station. HkCMS backend Ad.php file has a code execution...
SQL injection vulnerability in seacms backend ad***_co***.php page (CNVD-2019-41067)
seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL injection vulnerability in seacms backend ad***_co***.php page (CNVD-2019-41066)
seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL injection vulnerability in seacms backend ad***_co***_ne***.php page (CNVD-2019-41062)
seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. seacms background adcone.php page SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL injection vulnerability in seacms backend ad***_co***.php page
seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL injection vulnerability in seacms backend ad***_co***.php page (CNVD-2019-41065)
seacms ocean movie management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL injection vulnerability in seacms backend ad***_co***_ne***.php page
seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. seacms background adcone.php page SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL injection vulnerability in seacms backend ad***_co***.php page (CNVD-2019-41068)
seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...
Weak Password Vulnerability in Huasan ER5200 Router
ER5200 is a high-performance Gigabit downstream router from H3C, which is targeted at the SMB market for Ethernet/fiber/ADSL access and network environments such as government, enterprise organizations, and Internet cafes. A weak password vulnerability exists in the H3C ER5200 router, which can b...
VMware Harbor Privilege Escalation (VMSA-2019-0015) (CVE-2019-16097)
The remote VMware Harbor cloud native registry is affected by a remote privilege escalation vulnerability. Instances of VMware Harbor with DB as the authentication backend and which allow users to self-register are vulnerable. An authenticated, non-administrator, remote attacker can exploit this ...
keycloak: session hijack using the user access token
Keycloak up to version 6.0.0 allows the end user token access or id token JWT to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user’s browser session...
SQL Injection Vulnerability in ASK2 Q&A System Backend uid Parameter
ask2 Q&A system is whatsns product community, providing free version of the open source php Q&A system, integration of paid Q&A system, paid voice Q&A system, comes with a super collection of features, rapid station building, powerful seo optimization. ASK2 Q&A system background uid parameters...
SQL injection vulnerability in seacms backend (CNVD-2019-40981)
SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in seacms backend (CNVD-2019-40977)
SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in seacms backend (CNVD-2019-40983)
SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in seacms backend (CNVD-2019-40976)
SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in seacms backend (CNVD-2019-40982)
SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...