10897 matches found
EMLsoft 'numPerPage' Parameter SQL Injection Vulnerability
EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.address.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the he...
QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10275)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/slideshow.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
QCMS cross-site scripting vulnerability (CNVD-2019-10284)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/category.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
QCMS Cross-Site Request Forgery Vulnerability
QCMS is an open source content management system CMS for creating responsive websites. A cross-site request forgery vulnerability exists in QCMS 3.0.1, which can be exploited by remote attackers to perform unauthorized operations with the help of the backend/user/admin/add.html URI...
CVE-2018-14974
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS...
CVE-2018-14976
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS...
CVE-2018-14975
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS...
CVE-2018-14971
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS...
CVE-2018-14969
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS...
Cross site scripting
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS...
CVE-2018-14972
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS...
Cross site request forgery (csrf)
An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI...
CVE-2018-14973
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS...
Cross site scripting
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS...
CVE-2018-14972
CVE-2018-14972 affects QCMS 3.0.1, with a cross-site scripting vulnerability in upload/System/Controller/backend/down.php. The issue is described across multiple records (NVD/CNVD/CVE entries) as an XSS in that file path; no specific exploit details, affected versions, or remediation are provided...
CVE-2018-14978
An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI...
CVE-2018-14925
Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace revealing use of net.sf.acegisecurity components...
CVE-2018-14925
Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace revealing use of net.sf.acegisecurity components...