250 matches found
WordPress WP Invoice Plugin <= 4.1.0 - Multiple Vulnerabilities
This plugin is prone to unauthorized setting changes, retrieving invoices of arbitrary users, updating previously invoiced users meta data and privilege escalation of logged in users. Solution Update the plugin...
Vulnerability in Oracle Fusion Middleware WebCenter Sites Component
Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...
Vulnerability in Oracle Fusion Middleware WebCenter Content component (CNVD-2015-06854)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. oracle WebCenter Content is one of the enterprise content management solution...
DESTOON前台getshell
简要描述： 如题。。 详细说明： \module\know\answer.inc.php 143 - 161行 case 'raise': //这个功能是 "知道功能" 悬赏的次数更新,因为默认只允许2次提高悬赏的次数 if$credit $credit dalert$L'lackcredit', 'goback'; $couldraise = $couldadmin;//是否是 "知道"发布的作者. if$item'process' != 1 $couldraise = false; if$item'raise' = $MOD'maxraise' $couldraise = false...
Cicada-known Enterprise Portal system v2. 5 sql injection to admin-vulnerability warning-the black bar safety net
The problem is when the user modifies the information of the place /system/module/user/control.php public function edit$account = " if!$ account or RUNMODE == 'front' $account = $this-app-user-account; if$this-app-user-account == 'guest' $this-locateinlink'login'; if! empty$POST...
SUSE-SU-2015:0928-1 Recommended update for sm-ncc-sync-data
This update for sm-ncc-sync-data contains the following changes: Add SUSE Cloud 4 channels. bnc883057 Fix parent label of the LTSS channel for SLMS...
JaManaGe enterprise built Station system v2. 0 injection vulnerability and fix-vulnerability warning-the black bar safety net
By:Mr. DzY aManaGe the enterprise built Station system with perfect enterprise website background management functions, can through the background simple operation to achieve a large amount of information updated. Finished Good system, products, news, talent, and customer service features and mor...
psipuss 1.0 (editusers.php) Remote Change Admin Password Exploit
Exploit for unknown platform in category web applications ================================================================ psipuss 1.0 editusers.php Remote Change Admin Password Exploit ================================================================ ?php / '/ -.-...
