4802 matches found
XSS vulnerability in the frontend of Angel School's training website system
Angel school training website system is an open source website management system. Angel School Training Website System has an XSS vulnerability in the front-end that can be exploited by attackers to execute malicious script code...
OX App Suite 7.10.2 Cross Site Scripting / Improper Access Control
Product: OX App Suite Vendor: OX Software GmbH Internal reference: 67097 Bug ID Vulnerability type: Cross-site scripting CWE-80 Vulnerable version: 7.10.2 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.2-rev14,...
MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure
MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Exploit: MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Date: 2019-12-30 Author: LiquidWorm Vendor: Emmanuel Product web page: https://github.com/empierre/MyDomoAtHome...
SQL injection vulnerability in the frontend fl***.php file of Dascommerce B2B2C multi-user mall system
Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. A SQL injection vulnerability exists in the fl.php file of the B2B2C multi-user mall system. An attacker can use the vulnerability to obtain sensitive...
Arbitrary file download vulnerability in Myucms frontend
MyuCMS open source content management system developed using ThinkPHP community mall. MyuCMS front-end arbitrary file download vulnerability , an attacker can exploit the vulnerability to download any file...
File Upload Vulnerability in ezEIP Frontend of Wando Network Technology Co.
ezEIP is a website management system of Wando Network Technology Co. A file upload vulnerability exists in the frontend of ezEIP of Wando Network Technology Co. Ltd, which can be exploited by an attacker to gain server administrator privileges...
mijnlijstenmakerij.nl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1048800 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
[SECURITY] Fedora 31 Update: cacti-1.2.8-1.fc31
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...
TPshop open source mall file upload vulnerabilities exist in the foreground
TPshop open source mall is developed with the latest version of ThinkPHP shop mall. TPshop open source mall front-end file upload vulnerability. Allow attackers to upload webshell, get server privileges...
CSRF in extension "Change password for frontend users" (fe_change_pwd)
The extension fails to implement a CSRF protection for update password action...
Privilege Escalation in extension "femanager direct mail subscription" (femanager_dmail_subscribe)
Failing to properly check access rights, the extension is susceptible to privilege escalation, making it possible for a logged in frontend user to modify other frontend user records...
Multiple vulnerabilities in extension "MKSamlAuth" (mksamlauth)
The extension fails to validate the response from the Identity Provider which allows an attacker to create various frontend users on affected TYPO3 websites...
Cross-Site Scripting in Link Handling
It has been discovered that t3:// URL handling and typolink functionality are vulnerable to cross-site scripting. Not only regular backend forms are affected but also frontend extensions which use the rendering with typolink...
TuziCMS 2.0.6 SQL injection vulnerability in frontend ho*** us***.cl***.php
TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS 2.0.6 front-end ho us.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in the Frontend of Dascommerce Mall System
Big Business Mall System is a business creation network based on ten years of reconstruction of the e-commerce architecture, to create a set of operators, suppliers, purchasers, users, distribution, etc., in the PC and mobile devices are compatible with the operation of a complete set of offline ...
SQL Injection Vulnerability in Pushcoupon CMS Frontend
Push Couponer CMS is a completely free Taobao coupon website source code program that automatically collects products with coupons and automatically applies for high commission programs. Push Couponer CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensiti...
74cms 4.2.26 SQL Injection Vulnerability in Frontend Co***.php Page
Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms 4.2.26 SQL injection vulnerability exists in the frontend Co.php page. An attacker can exploit the vulnerability to obtain sensitive information from the...
SQL Injection Vulnerability in ShopsN Frontend
ShopsN free version of the B2C e-commerce is a Shanghai Yisu Network Technology Co., Ltd. in line with the enterprise-class commercial standards of full-featured free commercial use of open source online store full network system. ShopsN front-end SQL injection vulnerability, attackers can exploi...
74cms Frontend SQL Injection Vulnerability
Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...
74cms Frontend SQL Injection Vulnerability
Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...