CVE-2021-20724

Reflected cross-site scripting vulnerability in the admin page of Telop01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20725

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20723

Reflected cross-site scripting vulnerability in MailForm01 free edition versions which the last updated date listed at the top of descriptions in the program file is from 2014 December 12 to 2018 July 27 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20725

CVE-2021-20725 is a reflected cross-site scripting vulnerability in the admin page of PHP Factory Calendar01 free edition v1.0.1 and earlier. The issue allows a remote attacker to inject arbitrary script via unspecified vectors, potentially causing scripts to run in a victim’s browser. Public det...

CVE-2021-20723

Reflected cross-site scripting vulnerability in MailForm01 free edition versions which the last updated date listed at the top of descriptions in the program file is from 2014 December 12 to 2018 July 27 allows a remote attacker to inject an arbitrary script via unspecified vectors...

Binary Vulnerability in the Official Free Version of ACDSee

ACDSee is an image viewing tool that supports fast opening and browsing of most image formats. ACDSee Official Free Edition contains a binary vulnerability that can be exploited by attackers to cause a denial of service...

License Star Free Edition has a dll hijacking vulnerability

Certificate Star is a professional full-featured ID photo production and editing software, the realization of the intelligent removal of skin oil light, the certificate clothing replacement technology at the same time to support online shooting: support for webcams and cameras that can be online...

CVE-2020-5615

Cross-site request forgery CSRF vulnerability in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5616

Calendar01, Calendar02, PKOBO-News01, PKOBO-vote01, Telop01, Gallery01, CalendarForm01, and Link01 Calendar01 free edition ver1.0.0, Calendar02 free edition ver1.0.0, PKOBO-News01 free edition ver1.0.3 and earlier, PKOBO-vote01 free edition ver1.0.1 and earlier, Telop01 free edition ver1.0.0,...

CVE-2020-5615

Cross-site request forgery CSRF vulnerability in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5616

Calendar01, Calendar02, PKOBO-News01, PKOBO-vote01, Telop01, Gallery01, CalendarForm01, and Link01 Calendar01 free edition ver1.0.0, Calendar02 free edition ver1.0.0, PKOBO-News01 free edition ver1.0.3 and earlier, PKOBO-vote01 free edition ver1.0.1 and earlier, Telop01 free edition ver1.0.0,...

CVE-2020-5615

The CVE-2020-5615 entry concerns CSRF in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 that can allow remote attackers to hijack administrator authentication via unspecified vectors. Public sources in the connected documents identify affected products as Calendar01 and Cal...

File Upload Vulnerability in Free Version of Hefei Qile Network Technology Co.

KILO Intermediary Free Edition is a TP5.1 based intermediary secured trading system. Hefei Qile Network Technology Co., Ltd Qile Intermediary Guarantee System Free Edition has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Shenzhen Microcosmos Interactive Limited Wecenter Learning Free Edition has a file upload vulnerability

WeCenter is an open source knowledge-based social Q&A community program that focuses on organizing, categorizing and retrieving community content, and distributing it by connecting to the WeChat public platform and mobile APP. Shenzhen WeCenter has a file upload vulnerability that can be exploite...

Arbitrary File Deletion Vulnerability in WeCenter Learning Free Edition

WeCenter is an open source knowledge-based social Q&A community program. An arbitrary file deletion vulnerability exists in the free version of WeCenter Learning, which can be exploited by an attacker to delete arbitrary files from the server...

Command Execution Vulnerability in Flush Free Edition

Flush Free Edition is a comprehensive financial service terminal developed for individual investors. A command execution vulnerability exists in Flush Free Edition. An attacker can exploit this vulnerability to execute malicious code...

SQL Injection Vulnerability in NiuShop B2B2C Multi-Merchant Mall System Free Edition

NiuShop B2B2C Multi-Merchant Mall System is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2B2C Multi-commercial Mall System free version of the existence of SQL injection vulnerability, attackers can use the...

Command Execution Vulnerability in NiuShop B2B2C Multi-Merchant Mall System Free Edition

NiuShop B2B2C Multi-Merchant Mall System is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. A command execution vulnerability exists in the free version of NiuShop B2B2C Multi-merchant Mall System. An attacker can...

SQL Injection Vulnerability in ASP Free Version of VANOC Enterprise Website Management System

Vanno Enterprise Website Management System is a website content management system based on a full DIV+CSS template. VANOC Enterprise Website Management System ASP Free Edition suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...