SQL Injection Vulnerability in ESPCMS P8 Backend Me***.php File

ESPCMS is an enterprise website management system built on LAMP development. A SQL injection vulnerability exists in the ESPCMS P8 backend Me.php file. Attackers can use this vulnerability to obtain sensitive information in the database...

BoyiCMS V3.0 Backend Logic Flaw Vulnerability

BoyiCMS is an intelligent building management system developed for hospital websites. A logic flaw vulnerability exists in BoyiCMS V3.0 backend. Attackers can use this vulnerability to obtain sensitive information in the background...

Code execution vulnerability in anmi V1.1.0 backend

Anmi program is a program that focuses on H5 mobile website/app construction. Code execution vulnerability exists in anmi V1.1.0. An attacker can exploit the vulnerability to execute commands and gain server privileges...

CVE-2018-1002105

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary reques...

UBUNTU-CVE-2018-1002105

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary reques...

CVE-2018-1002105

CVE-2018-1002105 affects Kubernetes: before versions v1.10.11, v1.11.5, and v1.12.3, the kube-apiserver mishandles error responses to proxied upgrade requests. This flaw lets specially crafted requests establish a connection through the API server to backends and then send arbitrary requests over...

CVE-2018-1002105

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary reques...

SQL Injection Vulnerability in HuCart Backend aj***_ar***.php Page

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version of the background ajar.php page there is a SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain sensitive database information...

Code execution vulnerability in vaeThink php backend

vaeThink is a lightweight, high speed PHP content management framework built on Layui and tp5. A code execution vulnerability exists in the vaeThink php backend. The vulnerability stems from the website's failure to filter php code resulting in arbitrary php code execution, writing a one-sentence...

Privilege Escalation

github.com/kubernetes/kubernetes is vulnerable to privilege escalation. Authenticated users are able to directly access a backend server through the Kubernetes API server using specially crafted requests. A remote attacker who is authenticated to the Kubernetes API server only will be able to sen...

SQL Injection Vulnerability in emlog v6.0.0 Backend wi***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend wi.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

File upload vulnerability in emlog v6.0.0 backend te***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A file upload vulnerability exists in the emlog v6.0.0 backend te.php page. An attacker can exploit the vulnerability to elevate background privileges...

SQL Injection Vulnerability in emlog v6.0.0 Backend co***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend co.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in emlog v6.0.0 Backend na***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend na.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

File upload vulnerability in emlog v6.0.0 backend pl***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A file upload vulnerability exists in the emlog v6.0.0 backend pl.php page. An attacker can exploit the vulnerability to elevate background privileges...

Qibo CMS station system V7.0 backend file reading vulnerability

Qibo CMS station system is a Guangzhou Qibo Network Technology Co. Qibo CMS system V7.0 backend file reading vulnerability exists. The vulnerability is due to the failure of the user to submit a special string of processing , resulting in directory traversal , an attacker can use the vulnerabilit...

SQL injection vulnerability in the background of Qibo CMS V7.0 system

Qibo CMS station system is a Guangzhou Qibo Network Technology Co. Qibo CMS system V7.0 backend SQL injection vulnerability exists. Attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Qibo CMS V7.0 Background

Qibo CMS station system is a Guangzhou Qibo Network Technology Co. Qibo CMS V7.0 SQL injection vulnerability exists in the background. Attackers can use the vulnerability to obtain sensitive information in the database...

PowerDNS DNSDist Data Injection Vulnerability

PowerDNS DNSDist is a load balancer from the Dutch company PowerDNS that shunts traffic to different servers to provide optimal performance for users. A security vulnerability exists in PowerDNS DNSDist versions prior to 1.3.3. A remote attacker can exploit the vulnerability with the help of...

UBUNTU-CVE-2018-14663

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a...