SQL injection vulnerability in seacms backend (CNVD-2019-40982)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

S-CMS School Building System v1.0 SQL Injection Vulnerability in Backend a*** S_s*** Parameter

S-CMS is a content management system CMS based on PHP and MySQL. S-CMS School Building System v1.0 has a SQL injection vulnerability in the background a Ss parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in seacms backend (CNVD-2019-40974)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-40978)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-40985)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-40984)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in SeaCMS backend (CNVD-2019-40972)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-40973)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-40980)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-40975)

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2019-16869

A flaw was found in Netty, where whitespace before the colon in HTTP headers is mishandled. This flaw allows an attacker to cause HTTP request smuggling. Mitigation Use HTTP/2 instead clear boundaries between requests Disable reuse of backend connections eg. http-reuse never in HAProxy or whateve...

CVE-2019-13025

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST HTTP request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable mod...

CVE-2019-13025

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST HTTP request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable mod...

CVE-2019-13025

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST HTTP request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable mod...

Multiple Vulnerabilities in YXCMS Backend

Yxcms is an enterprise building system based on PHP and mysql technology. YXCMS backend there are disk directory traversal, disk arbitrary file deletion, code execution, arbitrary file upload vulnerability, attackers can use the vulnerability to obtain sensitive information, arbitrary deletion of...

SQL Injection in Zingbox Inspector

An SQL injection vulnerability exists in the Zingbox Inspector management interface that allows for unsanitized data provided by an authenticated user to be passed from the web UI into the database. Ref: CVE-2019-15016 The vulnerability allows for authenticated users to pass unsanitized commands ...

S-CMS enterprise website builder system backend L_f*** parameters exist SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Lf parameter in the background of S-CMS enterprise website building system. Attackers...

S-CMS enterprise website builder system backend M_f*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Mf parameter in the background of S-CMS enterprise website building system. Attackers...

Logic flaw vulnerability in Ruoyi's backend management system

Ruoyi backend management system is based on SpringBoot2.0 rights management system . A logic flaw vulnerability exists in the Ruoyi Backend Management System. An attacker can view the source code to obtain a username and password to log in to the backend...

EulerOS 2.0 SP8 : glib2 (EulerOS-SA-2019-2077)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in...