SQL Injection Vulnerability in Extreme CMS Frontend (CNVD-2020-26828)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Code execution vulnerability in zzcmsV1.7.5 frontend

zzcms is a free website builder developed in asp language. A code execution vulnerability exists in the frontend of zzzcmsV1.7.5, which can be exploited by attackers to launch RCE attacks...

Pinger 1.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Title: Pinger 1.0 - Remote Code Execution Author: Milad Karimi Vendor Homepage: https://github.com/wcchandler/pinger Software Link: https://github.com/wcchandler/pinger Tested on: windows 10 , firefox Version: 1.0 CVE : N/A...

[SECURITY] Fedora 31 Update: cacti-1.2.11-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

CVE-2017-16648

The dvb frontend management subsystem in the Linux kernel contains a use-after-free which can allow a malicious user to write to memory that may be assigned to another kernel structure. This could create memory corruption, panic, or possibly other side affects...

Project iKy v2.4.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface

Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...

SQL Injection Vulnerability in Heybbs Frontend lo***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs front lo.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs Frontend us***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs front us.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

XSS vulnerability in 115CMS frontend

115CMS is an open source content management system developed with ThinkPHP framework. 115CMS has an XSS vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information such as user cookies...

Web exhibition PHP foreign trade enterprise website red style front SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. SQL injection vulnerability exists in the red style frontend of Nethub's PHP foreign trade enterprise website, which can be exploited by attackers to obta...

SQL Injection Vulnerability in Frontend of zzcms Website Building System

zzcms is a free website builder, featuring easy-to-use labels, a secure system core, and a good user experience. There is a SQL injection vulnerability in the frontend of zzcms, which can be exploited by attackers to obtain sensitive database information...

CVE-2020-10243

An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype...

PT-2020-11999 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.16 Description: The issue is related to a SQL injection vulnerability due to the lack of type casting of a variable in a SQL statement. This vulnerability affects the Featured Articles frontend menutype...

SQL Injection Vulnerability in EjuCMS Frontend of Hainan Eju Technology Co.

Eju real estate system EjuCMS is a set of localized O2O real estate website platform system, users can quickly find their own suitable real estate, real estate agents to promote their own exclusive sale of properties and so on. Ltd. EjuCMS front-end SQL injection vulnerability, attackers can use...

[SECURITY] Fedora 31 Update: cacti-1.2.10-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

Design/Logic Flaw

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

Login Bypass Vulnerability in LaySNS

LaySNS is a lightweight integrated site building system. LaySNS suffers from a login bypass vulnerability, which can be exploited by an attacker to forge the identity of any frontend user to login...

HackerOne: Mismatch between frontend and backend validation via `ban_researcher` leads to H1 support and hackers email spam

Summary: We found a mismatch between the frontend and backend validation when using the ban researcher feature, available for program customer. Description: When a program customer issues a ban, an automatic email will be send both to the banned user and H1 support. The problem is that fronted wi...

Command Execution Vulnerability in eyoucms Frontend

Eyoucms is based on TP5.0 framework for the core development of free + open source enterprise content management system . Children's foreign trade responsive English website template comes with eyoucms core. eyoucms front-end command execution vulnerability , attackers can use the vulnerability t...

Logic Flaw Vulnerability in JEECG-BOOT System of Beijing Guo Torch Information Technology Co.

Jeecg-Boot is a code generator based rapid development platform that can be used to develop backend management systems such as ERP, CRM and applets. A logic flaw exists in the JEECG-BOOT system of Beijing Guo Torch Information Technology Co., Ltd, which can be exploited by an attacker to modify t...