subrion backend sql any implementation

No description provided by source...

ESPCMS V6 Backend SQL Injection Vulnerability

ESPCMS enterprise website management system based on LAMP development and construction of enterprise website management system, it is simple, powerful, stability, scalability and security, secondary development and late maintenance is convenient, can help you quickly and easily build a powerful a...

SOGo Backend Calendar Access Restriction Bypass Vulnerability

SOGo is an extensible, modern collaboration suite that offers features such as management of calendars and address books, and full-featured Web mail client resource sharing. An access restriction bypass vulnerability exists in Backend Calendar in SOGo version 2.3.9. An attacker could exploit this...

Grails console CSRF vulnerability

Grails is a set of open source framework for rapid Web application development , it is based on the Groovy programming language , and built on top of Spring, Hibernate and other open source frameworks , is a highly productive one-stop framework . Grails has a security vulnerability , an attack ca...

TYPO3 Multiple Vulnerabilities-01 (Jul 2016)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

Stored Cross-Site Scripting Vulnerability in Goo App

Gudong is a GPS sports social mobile software to track sports routes and discover sports information and anecdotes. A stored XSS vulnerability exists in the GooDong app. An attacker can use the vulnerability to obtain an administrator cookie and enter the backend via the cookie...

Information Disclosure in TYPO3 Backend

More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-017...

Cross-Site Scripting in TYPO3 Backend

More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-014/...

Insecure Unserialize in TYPO3 Import/Export

It has been discovered, that TYPO3 is susceptible to Insecure Unserialize. Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerable subcomponent: Import/Export Vulnerability Type: Insecure Unserialize Affected Versions: Versions 6.2.0 to 6.2.25, 7.6.0 to 7.6.9 and 8.0.0 to 8.2.0 Severity:...

Information Disclosure in TYPO3 Backend

It has been discovered, that TYPO3 is susceptible to Information Disclosure. Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Information Disclosure Affected Versions: Versions 6.2.0 to 6.2.25, 7.6.0 to 7.6.9 and 8.0.0 to 8.2.0 Severity: L...

Cross-Site Scripting in TYPO3 Backend

It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting. Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.25, 7.6.0 to 7.6.9 and 8.0.0 to 8.2.0 Severity: Mediu...

Multiple SQL Injection Vulnerabilities in the Backend of Imperial Website Management System V7.2

Empire CMS is based on B/S structure, Empire CMS-logo easy-to-use website management system. There are multiple SQL injection vulnerabilities in the backend of Empire CMS V7.2. Allow attackers can exploit the vulnerability to obtain database sensitive information...

Cross-Site Scripting in TYPO3 Backend

More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-021...

Microsoft Windows Printing Background Handler Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Print Spooler service is one of the print service components. A remote code execution vulnerability exists in the Microsoft Windows Print Spooler service, which originates when the Print Backend Handl...

SUSE-SU-2016:1764-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 Realtime kernel was updated to 3.12.58 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-7566: The treoattach function in drivers/usb/serial/visor.c in the Linux kernel allowed physically proximate attackers to cause a...

SQL Injection Vulnerability in FangMail Email Backend Management System

U-Mail mail is widely used in government departments, schools, enterprises and institutions group enterprise mailbox software. A SQL injection vulnerability exists in the background management system of FangMail Mail. It allows attackers to utilize commonly used SQL injection tools to obtain...

Vulnerability of Universal Password Login in Bozhong Travel Distribution System

The BoZone Travel Distribution System is an integrated product consisting of a series of related products. A universal password login vulnerability exists in the BoZone Travel Distribution System, which can be exploited by an attacker to gain direct access to the backend and obtain sensitive...

Weak Password Vulnerability in Web Management System of Xi'an Netcom Network Technology Co.

Xi'an Netcom Network Technology Co., Ltd. website management system is to provide customers with a total solution for network marketing. A weak password vulnerability exists in the website management system of Xi'an Netco Network Technology Co. An attacker can utilize the default background as:...

Espcms latest version backend has csrf vulnerability

ESPCMS enterprise website management system is a powerful enterprise website management system built on LAMP development. Espcms background csrf vulnerability, attackers can with the vulnerability to forge cross-site requests, add new administrator users, resulting in information leakage...

backend.worldoftulo.com XSS vulnerability

Vulnerable URL: https://backend.worldoftulo.com/oauth2/logout?continue=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...