SQL Injection Vulnerability in the Frontend of waychar Enrollment System

Waychar Enrollment System is a PHP/MYSQL based enrollment system. A SQL injection vulnerability exists in the frontend of waychar enrollment system. An attacker can exploit this vulnerability to obtain sensitive information from the database...

Stored Cross-Site Scripting Vulnerability in Dum Dum CMS Frontend

Clumsy CMS is developed using PHP5+MYSQL as the technical base, the system is scalable and fully open source. A stored cross-site scripting vulnerability exists in the frontend of Dum Dum CMS. Attackers can use the vulnerability to obtain the administrator cookie...

CVE-2020-7671

goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to b...

Design/Logic Flaw

goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to b...

[SECURITY] Fedora 31 Update: cacti-1.2.12-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

Project iKy v2.6.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface

Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...

SQL Injection Vulnerability in Xionghai CMS Frontend

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information from the...

Multiple Storage-based Cross-site Scripting Vulnerabilities in DM Building System Frontend

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM building system front-end exists in a number of storage-based cross-site scripting vulnerabilities. Attackers can exploit the vulnerability to obta...

Code Execution Vulnerability in Ear Distribution Frontend

Ear Distribution is a content management system. A code execution vulnerability exists in the frontend of Ear Distribution. An attacker could gain server privileges by constructing malicious code...

Stored Cross-site Scripting Vulnerability in the Frontend of Guojiz Web Site Navigation System

Guojiz website navigation system is a navigation website source code developed by PHP+MySQL. A stored cross-site scripting vulnerability exists in the frontend of the Guojiz web navigation system. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in the Frontend of Tuan ah VIP Movie System

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A XSS vulnerability exists in the frontend of Tuan Ah VIP Movie System. An attacker can exploit this vulnerability to obtain user cookie information...

XSS Vulnerability in Extreme CMS Frontend

Extreme CMS is a website building system. An XSS vulnerability exists in the frontend of Extreme CMS, which can be exploited by attackers to obtain user cookie information...

WP Frontend Profile < 1.2.2 - CSRF Check Incorrectly Implemented

The WP Frontend Profile WordPress plugin did not verify the Cross-Site Request Forgery CSRF nonce correctly...

WordPress WP Frontend Profile plugin <= 1.2.1 - Nonce Security Issue vulnerability

Nonce Security Issue vulnerability discovered by Julio Potier in WordPress WP Frontend Profile plugin versions = 1.2.1. Solution Update the WordPress WP Frontend Profile plugin to the latest available version at least 1.2.2...

SQL Injection Vulnerability in Stone Technology Online Exam System Frontend

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores...

CVE-2020-10795

Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend. This can be combined with CVE-2020-10794 for remote root access...

CVE-2020-9474

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway...

CVE-2020-9474

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway...

CVE-2020-10795

Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend. This can be combined with CVE-2020-10794 for remote root access...

Remote code execution

Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend. This can be combined with CVE-2020-10794 for remote root access...