8010 matches found
Rukovoditel Project Management CRM 2.5.2 SQL Injection
Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'reportsid' SQL Injection Google Dork: N/A Date: 2020-01-15 Blog: https://fatihhcelik.blogspot.com/ Exploit Author: Fatih Çelik Vendor Homepage: https://www.rukovoditel.net/ Software Link: https://sourceforge.net/projects/rukovoditel/...
Friday Squid Blogging: Stuffed Squid with Vegetables and Pancetta
A Croatian recipe. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Catfish Blog has a file upload vulnerability
Catfish Blog is a free personal blogging system. A file upload vulnerability exists in Catfish Blog, which can be exploited by an attacker to upload malicious files and gain administrative privileges on the site...
Amazon Takes a Swipe at PayPal's $4 Billion Acquisition
The retail giant warned holiday shoppers that Honey, a popular browser extension, was a “security risk.” Honey denies the claim...
Command Execution Vulnerability in Blue Route Blog System (CNVD-2020-13869)
The Blue Route blog system is a user multi-user collaborative writing blog system. A command execution vulnerability exists in the Blue Route Blog System that can be exploited by an attacker to gain control of a web server...
Code execution vulnerability in Blue Route blog system se***_pa***.php file
Blue Route Blog System is built with PHP+MySQL. A code execution vulnerability exists in the sepa.php file of the Blue Route blog system. An attacker can exploit the vulnerability to execute commands and gain server privileges...
elearning-script 1.0 - Authentication Bypass Vulnerability
Exploit for windows platform in category web applications Exploit Title: elearning-script 1.0 - Authentication Bypass Author: riamloo Vendor Homepage: https://github.com/amitkolloldey/elearning-script Software Link: https://github.com/amitkolloldey/elearning-script/archive/master.zip Version: 1...
mybb -- multible vulnerabilities
mybb Team reports: High risk: Installer RCE on settings file write Medium risk: Arbitrary upload paths and Local File Inclusion RCE Medium risk: XSS via insufficient HTML sanitization of Blog feed and Extend data Low risk: Open redirect on login Low risk: SCEditor reflected XSS...
CVE-2019-6034
a-blog cms versions prior to Ver.2.10.23 Ver.2.10.x, Ver.2.9.26 Ver.2.9.x, and Ver.2.8.64 Ver.2.8.x allows arbitrary scripts to be executed in the context of the application due to unspecified vectors...
CVE-2019-6033
Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 Ver.2.10.x, Ver.2.9.26 Ver.2.9.x, and Ver.2.8.64 Ver.2.8.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2019-6033
Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 Ver.2.10.x, Ver.2.9.26 Ver.2.9.x, and Ver.2.8.64 Ver.2.8.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 Ver.2.10.x, Ver.2.9.26 Ver.2.9.x, and Ver.2.8.64 Ver.2.8.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2019-6033
CVE-2019-6033 is an XSS in a-blog cms. Affected: versions prior to 2.10.23 (2.10.x), 2.9.x prior to 2.9.26, and 2.8.x prior to 2.8.64. Description across sources states a reflected cross‑site scripting vulnerability that can allow an arbitrary script to be executed in the user’s browser. Root cau...
CVE-2019-6033
Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 Ver.2.10.x, Ver.2.9.26 Ver.2.9.x, and Ver.2.8.64 Ver.2.8.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2019-6034
a-blog cms versions prior to Ver.2.10.23 Ver.2.10.x, Ver.2.9.26 Ver.2.9.x, and Ver.2.8.64 Ver.2.8.x allows arbitrary scripts to be executed in the context of the application due to unspecified vectors...
CVE-2019-6034
The CVE-2019-6034 issue exists in a-blog cms prior to versions 2.10.23 (2.10.x), 2.9.26 (2.9.x), and 2.8.64 (2.8.x). It enables arbitrary scripts to be executed in the context of the application due to a script injection flaw (unspecified vectors). Impact is that an arbitrary script may run in th...
a-blog cms script injection vulnerability
appleple a-blog cms is a content management system CMS from appleple Japan. An injection vulnerability exists in appleple a-blog cms version 2.10.x before 2.10.23, version 2.9.x before 2.9.26, and version 2.8.x before 2.8.64. The vulnerability arises from a lack of proper validation of user input...
appleple a-blog cms cross-site scripting vulnerability (CNVD-2020-02706)
appleple a-blog cms is a content management system CMS from appleple Japan. A cross-site scripting vulnerability exists in appleple a-blog cms versions 2.10.x before 2.10.23, 2.9.x before 2.9.26, and 2.8.x before 2.8.64. The vulnerability stems from a lack of proper validation of client-side data...
'Star Wars: The Rise of Skywalker' Is a Lesson in Military Opposites
The Resistance is outmanned and outgunned, but their adaptability wins the day...
JVN#10377257: Multiple vulnerabilities in a-blog cms
a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2019-6033 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N| Base Score: 4.3...