Arbitrary User Login Vulnerability in Tongda OA Frontend

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Weiphp 5.0 beta frontend Ma***.php page has XSS vulnerability

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the Weiphp 5.0 beta frontend Ma.php page. An attacker can use this vulnerability to insert malicious js code to obtain user...

SQL Injection Vulnerability in Extreme CMS Frontend (CNVD-2020-26828)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs Frontend lo***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs front lo.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in EjuCMS Frontend of Hainan Eju Technology Co.

Eju real estate system EjuCMS is a set of localized O2O real estate website platform system, users can quickly find their own suitable real estate, real estate agents to promote their own exclusive sale of properties and so on. Ltd. EjuCMS front-end SQL injection vulnerability, attackers can use...

Command Execution Vulnerability in eyoucms Frontend

Eyoucms is based on TP5.0 framework for the core development of free + open source enterprise content management system . Children's foreign trade responsive English website template comes with eyoucms core. eyoucms front-end command execution vulnerability , attackers can use the vulnerability t...

SQL injection vulnerability in the frontend of the Ship 100 virtual goods auto-shipment system

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Shipping 100 virtual goods autoship system SQL injection vulnerability exists in the foreground, an attacker can exploit the vulnerability to obtain database sensitive information...

Logic flaw vulnerability in the uc***.php file in the frontend of Five Fingers CMS

Five Fingers CMS is an open source content management system. A logic flaw vulnerability exists in the uc.php file in the frontend of Five Fingers CMS. Attackers can use the vulnerability to log in to any user , access sensitive information , to perform unauthorized operations...

ShopsN suffers from a SQL injection vulnerability

ShopsN is a full-featured free commercial use of open-source online store in line with enterprise-class commercial standards under the Shanghai Yisou Network Technology Co. ShopsN has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain sensitive informatio...

XSS vulnerability in the frontend of Angel School's training website system

Angel school training website system is an open source website management system. Angel School Training Website System has an XSS vulnerability in the front-end that can be exploited by attackers to execute malicious script code...

SQL injection vulnerability in the frontend fl***.php file of Dascommerce B2B2C multi-user mall system

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. A SQL injection vulnerability exists in the fl.php file of the B2B2C multi-user mall system. An attacker can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in the Frontend of Dascommerce Mall System

Big Business Mall System is a business creation network based on ten years of reconstruction of the e-commerce architecture, to create a set of operators, suppliers, purchasers, users, distribution, etc., in the PC and mobile devices are compatible with the operation of a complete set of offline ...

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in the Frontend of Xinxiao Online Marking System

Xinkao Online Marking System is an online marking system for the majority of teachers and friends. Xinkao Online Marking System has a SQL injection vulnerability in the foreground, which can be exploited by attackers to obtain sensitive information from the database...

X5music Music Management System frontend ne***.php file has SQL injection vulnerability

X5music music management system is a set of open source music products. X5music music management system front ne.php file SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

Stored Cross-Site Scripting Vulnerability in ZrLog Frontend

ZrLog is a blog/CMS program developed in Java. A stored cross-site scripting vulnerability exists in the ZrLog frontend. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

Logic flaw vulnerability in the frontend of S-CMS enterprise website builder system

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise station building system front platform there is a logic flaw vulnerability, attackers can use the vulnerability to...

XSS vulnerability in frontend of super cms v2.39

Super CMS content management system in order to solve the problem of website optimization and development of a set of products, it is an efficient open source content management system, the product is based on PHP + MYSQL architecture, can run on Windows, Linux, MacOSX, Solaris and other various...

XSS Vulnerability in the Frontend of the Kaixin Helpdesk System

The Kaixin Helpdesk Helpdesk helps IT to collect the problems handled on a daily basis and generate reports to quantify the work. An XSS vulnerability exists in the frontend of the Qixing Helpdesk system, which can be exploited by attackers to obtain administrator cookie information...