Basecamp: HTTP request smuggling on Basecamp 2 allows web cache poisoning

It is found that an authenticated Basecamp 2 user can desync front and backend servers and poison the socket with harmful response for the next visitor. During redirect probe, It also appears that front-end infrastructure performs caching of content. Using HTTP request smuggling attack, It is...

SQL injection vulnerability in ECShop front-end fl***.php file at Merchant Pie Software Ltd.

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store, the system is based on PHP language and MYSQL database framework for the development of cross-platform open source program. ECShop front-end fl.php file SQL...

Cross site scripting

Nozomi Guardian before 19.0.4 allows attackers to achieve stored XSS in the web front end by leveraging the ability to create a custom field with a crafted field name...

Heybbs micro-community suffers from SQL injection vulnerability (CNVD-2020-45134)

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs Micro Community has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Logic flaw vulnerability in Heybbs micro-community

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. A logic flaw vulnerability exists in Heybbs Micro Community, which can be exploited by attackers to compromise confidentiality and integrity...

Gira TKS-IP-Gateway Operating System Command Injection Vulnerability

Gira TKS-IP-Gateway is a network communication gateway product from Gira Germany. A security vulnerability exists in Gira TKS-IP-Gateway version 4.0.7.7. The vulnerability can be exploited by an attacker to execute code via the backup function of the web front-end...

S.Siedle & Soehne SG 150-0 Smart Gateway Code Execution Vulnerability

S.Siedle & Soehne SG 150-0 Smart Gateway is a home smart gateway product from S.Siedle & Soehne, Germany. A security vulnerability exists in the S.Siedle & Soehne SG 150-0 Smart Gateway prior to version 1.2.4. The vulnerability can be exploited by an attacker to execute code via the backup functi...

Debian: Security Advisory (DLA-2196-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4202

IBM UrbanCode Deploy UCD 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End DFE. IBM X-Force ID: 174955...

CVE-2020-4202

IBM UrbanCode Deploy UCD 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End DFE. IBM X-Force ID: 174955...

Code injection

IBM UrbanCode Deploy UCD 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End DFE. IBM X-Force ID: 174955...

CVE-2020-4202

IBM UrbanCode Deploy UCD 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End DFE. IBM X-Force ID: 174955...

SQL Injection Vulnerability in Rookie Enterprise Website System

Rookie enterprise website system can be used for free, can be used for commercial purposes, there is no time limit. The system is fully functional in the background, easy to operate, can be opened pseudo-static and pure static mode, conducive to SEO optimization; the front can be set to display...

Front-end Arbitrary User Fake Login Vulnerability in Tongda OA

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software developed by Beijing Tongda Science and Technology Co. Ltd. is a collaborative office automation software developed by the company. Tongda OA front-end arbitrary user forgery login...

Heybbs Micro Community in***.php file has a reload vulnerability

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs micro-community in.php file exists reloading vulnerability. An attacker can use the vulnerability to reset all the data on the website and gain server privilege...

SQL Injection Vulnerability in kkcms foreground ac***.php file

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms front ac.php file exists SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitiv...

File upload vulnerability in H-ui.admin

H-ui front-end framework is a lightweight front-end framework. A file upload vulnerability exists in H-ui.admin, which can be exploited by attackers to gain control of a web server...

waitress: HTTP Request Smuggling through Invalid whitespace characters in headers

An HTTP-interpretation flaw was found in waitress, through version 1.4.0. If a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially...

Information Disclosure

react-oauth-flow is vulnerable to information disclosure. The vulnerability exists as it stores secrets in the front-end instead of using a properly implemented OAuth client...

Improper Authorization

Overview All versions of react-oauth-flow fail to properly implement the OAuth protocol. The package stores secrets in the front-end code. Instead of using a public OAuth client, it uses a confidential client on the browser. This may allow attackers to compromise server credentials. Recommendatio...