YzmCMS 'url' Cross-Site Scripting Vulnerability

YzmCMS is a lightweight open source content management system based on PHP + Mysql architecture,YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS 'url' cross-site scripting vulnerability. The vulnerability is due to the application/link/controller/link.class.php file...

SQL injection vulnerability in As***.class.php file of ShopsN single merchant b2c mall system

ShopsN single merchant b2c mall system is an open source online store system developed using PHP + MySQL. ShopsN single merchant b2c mall system As.class.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

CVE-2020-7229

An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search engine. The parameter is landinglocation. The function is countSearchedJobs. The file is lib/class.Job.php...

Exploit for Deserialization of Untrusted Data in Apache Log4J

CVE-2019-17571 is a vulnerability in the Apache Commons FileUpload library. It allows an attacker to upload a malicious file with a .class extension, which can be used to execute arbitrary code on the server. The vulnerability is caused by the library not properly validating the file extension...

SQL injection vulnerability in the fo***.class.php file of Laikai e-commerce management system

Laike e-commerce management system is an open source e-commerce management system. Laike e-commerce management system fo.class.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in phpyun in***.class.php file

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. The phpyun in.class.php file contains a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information...

PT-2019-13436 · Impress · Give

Name of the Vulnerable Software and Affected Versions: Impress GiveWP Give plugin versions prior to 2.5.1 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system via the includes/payments/class-payments-query.php file...

SQL injection vulnerability in OpenSNS In***.class.php file

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. An SQL injection vulnerability exists in the OpenSNS In.class.php file, which can be exploited by attackers to obtain sensitive information...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This is because the I18n component of OpenJDK could use an untrusted search path when loading resource bundle classes. A local attacker could possibly use this flaw to execute arbitrary code as another local user by making the...

Teclib GLPI License Issue Vulnerability

Teclib GLPI is an IT asset management solution. A security vulnerability exists in the Auth::checkPassword in the inc/auth.class.php file in Teclib GLPI versions prior to 9.4.1.1. An attacker can exploit this vulnerability to bypass authentication...

Code execution vulnerability in SchoolCMS V2.3.1 backend Sm***.cl***.php

SchoolCMS is a school teaching management system based on PHP+MySQL. A code execution vulnerability exists in the schoolcms backend SmsController.class.php. An attacker can exploit this vulnerability to execute arbitrary code...

SQL Injection Vulnerability in SchoolCMS v2.3.1 Us***.class File

SchoolCMS is a school teaching management system based on PHP+MySQL. A SQL injection vulnerability exists in the SchoolCMS v2.3.1Us.class file, which can be exploited by attackers to obtain sensitive information...

YUNUCMS Arbitrary File Deletion Vulnerability

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. A security vulnerability exists in the statics/ueditor/php/vendor/Local.class.php file in YUNUCMS version 1.1.5. An attacker can exploit this vulnerability by...

SeaCMS Code Execution Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A code execution vulnerability exists in SeaCMS version 6.61, which originates from the 'parseIf' function in the include/main.class.php file...

CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

Heap overflow

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

UBUNTU-CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...

CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...