1090 matches found
SQL Injection Vulnerability in Bidding System Bid Frontend ge***.aspx Page
Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...
SQL Injection Vulnerability in eDoc Front-end ge***.aspx Page
Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc front ge.aspx page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...
SQL Injection Vulnerability in Bidding System Bid Frontend sl***.aspx Page
Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...
SZ NetChat Options Module Cross-Site Scripting Vulnerability
SZ NetChat is an online chat application.Options module is one of the menu modules. A cross-site scripting vulnerability exists in the MyName input field of the Options module in SZ NetChat versions prior to 7.9, which can be exploited by a remote attacker to inject commands that could affect the...
iWebShop open source mall system has xss vulnerability
iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source mall system . The system is divided into front-end , back-office and merchant . iWebShop open source mall system has an xss vulnerability that can be...
S-CMS School Building System SQL injection vulnerability in front-end ed***/fo***.php page
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the ed/fo.php page of S-CMS School Building System. Attackers can use the vulnerability to...
S-CMS News Portal System SQL Injection Vulnerability in Frontend ne***/fo***.php Page
S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. A SQL injection vulnerability exists in the front-end ne/fo.php page of the S-CMS news portal system. An attacker can exploit the vulnerability to obta...
DSMall open source multi-user mall system front-end command execution vulnerability
DSMall is an open source B2B2C e-commerce system created by Deshaun Networks. DSMall open source multi-user mall system in the foreground there is a command injection vulnerability . Attackers can use the vulnerability to obtain server privileges...
S-CMS e-commerce system SQL injection vulnerability in front-end ms***/fo***.php page
S-CMS e-commerce system is an e-commerce software. A SQL injection vulnerability exists in the front-end ms/fo.php page of S-CMS e-commerce system. An attacker can exploit the vulnerability to obtain sensitive database information...
S-CMS government website builder system SQL injection vulnerability in front-end go***/fo***.php page
S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions for station building products. There is a SQL injection vulnerability in the front-end go/fo.php page of S-CMS government website builder system. Attackers...
SQL injection vulnerability in the front-end me***/fo***.php page of S-CMS hospital website builder system
S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. There is a SQL injection vulnerability in the front-end me/fo.php page of S-CMS Hospital Building System. Attackers can use the vulnerability to obtain sensitive...
anmi V1.1.0 SQL Injection Vulnerability in Foreground Us***.php File
Anmi program is a program that focuses on H5 mobile website/app construction. anmi V1.1.0 A SQL injection vulnerability exists in the front-end Us.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
HuCart front-end aj***_ar***.php page has SQL injection vulnerability
HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version of the front ajar.php page there is a SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain sensitive database information...
CVE-2018-4277: a“pie”triggered spoofing-vulnerability warning-the black bar safety net
Researchers looking for the browser front-end security issues found in Chrome, Safari, Firefox and other browsers there is a security vulnerability. This article describes Apple products Alphabet d-shaped problems caused by domain spoofing problem. U+A771 The researchers found that Apple products...
SQL Injection Vulnerability in Frontend me***.Asp Page of Rongguang Information Ordering and Consumption System
Rongguang Information Ordering and Picking Up Food Consumption System is a multi-functional ordering system developed by Shenzhen Rongguang Information Co. SQL injection vulnerability exists in the front-end me.Asp page of Rongguang Information Ordering and Consumption System, which can be...
Storage-type cross-site scripting vulnerability at the front-end posting message of PawnBuilder CMS
SmallBuild CMS is a website management backend based on the OneThink open source framework. A stored cross-site scripting vulnerability exists in the front-end posting message of PawnBuilder CMS. Attackers by building a CSRF add administrator user can insert malicious js code in the page to obtai...
SQL Injection Vulnerability in Dscms
Dscms is an enterprise website builder based on TP5.0 framework development, using PHP + Mysql architecture. Dscms 0.1 version of the front-end SQL injection vulnerability, the vulnerability stems from the failure to filter the parameter $id, attackers can use the vulnerability to obtain sensitiv...
Captcha bypass in extension "Front End User Registration" (sr_feuser_register)
When the extension is used together with the TYPO3 Extension srfreecap, it is possible to bypass the catcha in the registration form...
Bootstrap Cross-Site Scripting Vulnerability (CNVD-2018-13371)
Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in the data-container attribute of tooltip in versions of Bootstrap prior to 4.1.2. A remote attacker can exploit this vulnerability to inject arbitrary web...