ECS Online Learning System v3.1.0 SQL Injection Vulnerability in Frontend ShitiController.class.php Page

E-learning Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. A SQL injection vulnerability exists in the ShitiController.class.php page in the frontend of ECS Online Learning System v3.1.0. An attacker can exploit this vulnerability t...

Logic Design Vulnerability in EasyCMS Frontend

EasyCMS is lightweight scalable open source content management program, following the Apache2 open source agreement. A logical design vulnerability exists in the frontend of EasyCMS. Attackers can log into the user center and modify other people's mailboxes and data by intercepting and modifying...

SQL Injection Vulnerability in the Frontend of Esaote E3 Omni-Channel Retail Management Software

E3 omni-channel retail management software is Esaote's e-commerce ERP system for online sales in the fashion industry, integrating Taobao interface, independent B2C mall system, advanced order processing system, logistics and warehousing system, network marketing and promotion system, and...

Catfish CMS v4.5.7 SQL Injection Vulnerability in Frontend

Catfish CMS is open source free PHP CMS web content management system. Catfish CMS v4.5.7 suffers from a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in TinyShop Frontend Common.php Page

TinyShop is an e-commerce system online store system based on the Tiny framework, suitable for businesses and individuals to quickly build a personalized online store. A SQL injection vulnerability exists in the TinyShop frontend Common.php page. The vulnerability is due to the system failing to...

Edusoho Online Learning Platform v8.0.16 SQL Injection Vulnerability in Frontend

Edusoho Online Learning Platform is a B2C independent online school system developed by Hangzhou Kuochi Network Technology Co. Edusoho Online Learning Platform v8.0.16 SQL injection vulnerability exists in the frontend. An attacker can use this vulnerability to obtain sensitive information from t...

SQL Injection Vulnerability in OrderController.class.php in ShopsN 2.0 Official Frontend

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN 2.0 official version of the front-end OrderController.class.php SQL injection...

KODExplorer v4.06 Arbitrary File Read Vulnerability in Frontend

KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...

Arbitrary File Write Vulnerability in KODExplorer v4.06 Frontend

KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...

SQL Injection Vulnerability in BuliderOrder Method in Frontend of ShopsN 2.0 Official Version

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. A SQL injection vulnerability exists in the BuliderOrder method in the frontend of...

Cross-site Scripting Vulnerability in Qibo CMS Frontend

Qibo CMS is a multifunctional modular website management system that combines articles, downloads, pictures, classifieds, videos, shopping malls, music, blogs, talents, Q&A and other modules. A cross-site scripting vulnerability exists in the front-end of Qibo CMS, where an attacker can construct...

ShopsN 2.0 official version of the foreground collection_del method SQL injection vulnerability

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system. A SQL injection vulnerability exists in the collectiondel method in the frontend of ShopsN...

Arbitrary User Login Vulnerability in S-CMS Frontend

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is an arbitrary user login vulnerability in the frontend of S-CMS. The vulnerability stems from the failure of the program to filter the data submitted by the user, an attacker can use the...

ShopsN v3.0 SQL Injection Vulnerability in Frontend UserSetController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 front-end UserSetController.class.php file has a SQL injection vulnerability . As the system fails to effectively filter the addressajax function. A remote attacker can exploit the vulnerability to obtain sensitive database information...

Gxlcms audiobook system v1.0 frontend CommAction.class.php has SQL injection vulnerability

Gxlcms audiobook system is a simple to use, provide listening to the network resource station to provide free collection nodes. Gxlcms Audiobook System v1.0 bulid 20170714 SQL injection vulnerability exists in CommAction.class.php in the foreground due to the system's failure to strictly filter...

Duomi (DuomiCms) Movie and TV Management System V1.32 SQL Injection Vulnerability in the Frontend

DuomiCms is a video-on-demand system designed for film and television station owners. Duomi DuomiCms Movie and TV Management System V1.32 SQL injection vulnerability exists in the foreground. The vulnerability is due to the system cardpwd variable does not filter the data submitted by the user, a...

SQL Injection Vulnerability in SDMCS V1.1 Frontend

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDMCS V1.1 SQL injection vulnerability exists in the front-end, due to the system does not effectively filter the data submitted by the user, the attacker can exploit the vulnerability to obtain sensitiv...

DzzOffice v1.3.1 SQL Injection Vulnerability in Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . A SQL injection vulnerability exists in DzzOffice v1.3.1 due to the program failing to strictly filter the keyword parameter...

SDCMS V1.1 Arbitrary Administrator Addition Vulnerability in Frontend

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDCMS V1.1 foreground exists arbitrary administrator to add a vulnerability, an attacker can use the vulnerability in the foreground to arbitrarily add an administrator account...

SQL Injection Vulnerability in ZZCMS Version 8.1

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the frontend of ZZCMS version 8.1, which can be exploited by attackers to obtain administrator accounts and passwords...