PT-2019-8473 · WordPress · Weblibrarian

Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.6 for WordPress Description: The issue concerns a Cross-Site Scripting XSS vulnerability. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website,...

PT-2019-8474 · Unknown · Weblibrarian Plugin

Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.7 Description: The issue allows for cross-site scripting XSS attacks via front-end short codes. Recommendations: For versions prior to 3.4.8.7, update to version 3.4.8.7 or later to resolve the issu...

Input validation

The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input...

SQL injection vulnerability in the front-end am***.php page of S-CMS school website builder system

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the front-end am.php page of S-CMS School Building System. Attackers can use the vulnerability...

Unauthorized Access Vulnerability in Shaanxi Cloud Enterprise CMS System

Ltd. currently has subsidiaries - Yulin Cloud Enterprise Media Co., Ltd. and Yulin Ali Zongchuang Information Technology Co. Shaanxi Cloud Enterprise CMS system has an unauthorized access vulnerability, attackers can use the vulnerability to directly front-end access to the administrator account...

GigToDo 1.3 - Cross-Site Scripting

GigToDo 1.3 - Cross-Site Scripting Exploit Title: GigToDo - Freelance Marketplace Script v1.3 Persistent XSS Injection Google Dork: - Date: 2019/07/28 Author: m0ze Vendor Homepage: https://www.gigtodoscript.com Software Link: https://codecanyon.net/item/gigtodo-freelance-marketplace-script/238553...

Shanghai Meicang Technology Information Development Co., Ltd. xss vulnerability exists in the frontend of build star

Ltd., is a cloud computing-based Internet application service provider. There is an xss vulnerability in the front-end of BuildStar, which can be exploited by attackers to inject arbitrary Web scripts or HTML...

FaceSentry Access Control System 6.4.8 Cleartext Password Storage

Summary FaceSentry 5AN is a revolutionary smart identity management appliance that offers entry via biometric face identification, contactless smart card, staff ID, or QR-code. The QR-code upgrade allows you to share an eKey with guests while you're away from your Office and monitor all activity...

CVE-2019-9056

An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php, it is possible to reach an unserialize call with an untrusted FEU cookie, and achieve authenticated object injection...

Debian DLA-1750-1 : roundup security update

Hanno Bck was discovered that there was a cross-site scripting XSS vulnerability in the web front-end of the roundup issue- tracking system. For Debian 8 'Jessie', this issue has been fixed in roundup version 1.4.20-1.1+deb8u2. We recommend that you upgrade your roundup packages. NOTE: Tenable...

[SECURITY] [DLA 1750-1] roundup security update

Package : roundup Version : 1.4.20-1.1+deb8u2 CVE ID : CVE-2019-10904 Hanno Böck was discovered that there was a cross-site scripting XSS vulnerability in the web front-end of the roundup issue- tracking system. For Debian 8 "Jessie", this issue has been fixed in roundup version 1.4.20-1.1+deb8u2...

Jfinal cms xss vulnerability at frontend article

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

Jfinal cms xss vulnerability in frontend registry

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

CVE-2019-5616

CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser...

CVE-2019-5616

CVE-2019-5616 affects CircuitWerkes Sicon-8, a hardware device with a web-based front-end. The vulnerability is a client-side authentication flaw implemented in JavaScript running in the user’s browser, resulting in a read-only authentication bypass. According to the available sources, this is ne...

Stored cross-site scripting vulnerability in WODECMS front-end ne***.cl***.php file

WODECMS is a content management system developed based on a self-developed PHP development framework. A stored cross-site scripting vulnerability exists in the WODECMS front-end ne.cl.php file. An attacker can insert malicious js code into the page to obtain user cookies and other information,...

SQL Injection Vulnerability in Super CMS Frontend lo***.php Page

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

Five Fingers CMS v4.1.0 SQL Injection Vulnerability in Frontend

Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture. Five Fingers CMS v4.1.0 SQL injection vulnerability exists in the front-end , an attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in the front-end pa***.asp file of Eco Times Enterprise Online Bookkeeping Management System

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...

SQL injection vulnerability in the front-end mo***_sh***_pa***.asp file of the Eco Times Enterprise Online Bookkeeping Management System.

EcoTime Enterprise Online Bookkeeping Management System is an online bookkeeping software for small and medium-sized enterprises, stores, etc. It is suitable for managing cash flow accounts, accounts receivable and payable accounts, as well as company bookkeeping and other related financial...