XSS vulnerabililty in the front end "unsubscribe" module of the newsletter extension

More info at https://contao.org/en/news/contao-3532.html...

Stored Cross-Site Scripting Vulnerability in DuxCms Frontend

DuxCms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. DuxCms frontend has a stored cross-site scripting vulnerability. Attackers can insert malicious js code in the front page to get user cookies and other...

SQL Injection Vulnerability in MacCMS Version 8.x

MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. A frontend SQL injection vulnerability exists in MacCMS version 8.x 2017-06-20, which can be exploited by attackers to obtain sensitive database information...

BlueTech Enterprise Website Management System (PHP version) front-end arbitrary file download vulnerability

BlueTech Enterprise Website Management System PHP version is developed with PHP+MYSQL technology and MVC mode. Support pseudo-static function, can generate google and baidu map, support custom url, keywords and description, in line with SEO standards. BlueTech enterprise website management system...

SQL injection vulnerabililty in the back end search filter and the front end listing module

More info at https://contao.org/en/news/contao-3531.html...

SQL injection vulnerabililty in the front end listing module

More info at https://contao.org/en/news/contao-448.html...

SQL injection in the back end search filter and the listing module

Date : 2017-11-15 CVE ID : CVE-2017-16558 Description Both the search filter in the back end and the listing module in the front end are vulnerable to SQL injections. To exploit the vulnerability in the back end, a back end user has to be logged in, whereas the front end the vulnerability can be...

WordPress Plugin Polls 1.2.4 - SQL Injection (PoC)

Exploit Title :WordPress Polls plugin1.2.4 SQL Injection vulnerability Vulnerable version:Download Link : https://downloads.wordpress.org/plugin/polls-widget.1.2.4.zip //////////////////////// /// Overview: //////////////////////// WordPress Polls plugin is a tool for creating polls and survey...

Typecho 1.1(15.5.12)前台任意代码执行漏洞

No description provided by source...

NiuShop open source mall system v1.16 front-end use plug-in functionality at the existence of any file contains vulnerabilities

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a PHP open source e-commerce system . NiuShop open source mall system v1.16 front-end use plug-in functionality at the existence of any file contains a...

74cms frontend has a logical design flaw

74cms is a free + open source professional recruitment system based on PHP + MYSQL as the core development. 74cms front-end there is a logical design vulnerability. The vulnerability is due to the foreground of the password recovery function fails to correctly verify the identity of the visitor...

SQL Injection Vulnerability in ShopsN v2.0 Frontend OrderController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end OrderController.class.php file SQL injection vulnerability . As the system fails to effectively filter the addrdel function. A remote attacker can exploit the vulnerability to obtain sensitive informatio...

ShopsN 2.0 official version of the front-end enterprise_group method SQL injection vulnerability

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN 2.0 official version of the foreground enterprisegroup method SQL injection...

ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability . As the system fails to effectively filter the addrdel function. A remote attacker can exploit the vulnerability to obtain sensitive database...

WeiPHP v4.0 beta SQL Injection Vulnerability in Frontend MessageController.class.phps Page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP v4.0 beta SQL injection vulnerability exists in the front-end MessageController.class.phps page. The vulnerability is due to the customsendall functi...

WeiPHP v4.0 beta SQL Injection Vulnerability in Frontend UserTagController.class.php Page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP v4.0 beta SQL injection vulnerability exists in the front-end UserTagController.class.php page. The vulnerability is due to the front page of the edi...

Null pointer dereference

In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end...

GLPI front/devicesoundcard.php file SQL injection vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. An SQL injection vulnerability exists in the front/devicesoundcard.php...

WordPress WP Security Audit Log plugin <= 2.4.3 - Reflected Cross-Site Scripting (XSS) Vulnerability

Reflected Cross-Site Scripting XSS Vulnerability exists in AjaxDisableCustomField function, in the file /wp-security-audit-log.php. The "notice" variable is printed on the front-end without escaping it. Solution Update the plugin...

DedeCMS stored xss vulnerability

Vulnerability description: Dedecms is an open source PHP open source website management system. Dedecms member function shopsdelivery. in php des parameters there is stored XSS vulnerability, the attacker may exploit the vulnerability to obtain the users cookie. Test environment: DedeCMS-V5...