1090 matches found
youke365 V1.0.7 最新版 前台SQL注入
...
PHPMyWind 5.5前台存在sql注入，可重置管理员密码
...
DOM-type cross-site scripting vulnerabilities in the front-end of Xingyunhai CMS (XYHcms)
Xing Yunhai CMS XYHcms is a completely open source CMS content management system. Xing Yunhai CMS XYHcms front-end DOM-type cross-site scripting vulnerabilities. Attackers can use the vulnerability to insert js code in the packet to obtain user cookies and other information...
SQL Injection Vulnerability in Cloud EC E-commerce System at Front-end User Comments
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system SQL injection vulnerability exists in the front-end user comments. Attackers can use...
Cloud EC e-commerce system SQL injection vulnerability in the foreground
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system SQL injection vulnerability exists in the frontend. Attackers can use the...
SQL Injection Vulnerability in Cloud EC E-commerce System at Front-end Order Evaluations
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system SQL injection vulnerability exists at the front-end order evaluation. Attackers can...
Use the password reset functions to achieve account-hijacking-vulnerability warning-the black bar safety net
Recently, I attended a platform to invite vulnerability testing project, in which the discovery of a unique account hijacking vulnerability, the entire vulnerability discovery process very unexpected but also very lucky, by the password reset function can be achieved account hijacking, and I will...
October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting
Exploit Title: October CMS User Plugin v1.4.5 - Persistent Cross-Site Scripting Date: 2018-04-03 Author: 0xB9 Software Link: https://octobercms.com/plugin/rainlab-user Version: 1.4.5 Tested on: Ubuntu 17.10 CVE: CVE-2018-10366 1. Description: Front-end user management for October CMS. Allows...
Design/Logic Flaw
An issue was discovered in the Users aka Front-end user management plugin 1.4.5 for October CMS. XSS exists in the name field...
Debian DSA-4165-1 : ldap-account-manager - security update
Michal Kedzior found two vulnerabilities in LDAP Account Manager, a web front-end for LDAP directories. - CVE-2018-8763 The found Reflected Cross Site Scripting XSS vulnerability might allow an attacker to execute JavaScript code in the browser of the victim or to redirect her to a malicious...
BEESCMS V4.0_R_20160525全局变量覆盖导致前台getshell
...
QCMS最新版3.0.1后台登录验证可绕过，结合任意文件上传可前台getshell
...
ZEIT Next.js Directory Traversal Vulnerability (CNVD-2018-03103)
ZEIT Next.js is an open source general-purpose webapps development framework . A directory traversal vulnerability exists in ZEIT Next.js version 4 prior to 4.2.3. An attacker can exploit this vulnerability to access front-end JavaScript components or possibly obtain sensitive data...
