4802 matches found
Codecat - Tool To Help In Manual Analysis In Codereview
CodeCat is a open source tool to help you in codereview, to find/track sinks and this points follow regex rules... How too install, step by step: Go to CodeCat directory, install backend and frontend libs: $ cd Front $ sudo python3 -m pip install -r requirements.txt $ cd .. $ cd Backend $ sudo...
XSS vulnerability in Popojicms frontend co***.php page
PopojiCMS is an open source content management system CMS based on the Popoji framework. Popojicms front co.php page has an XSS vulnerability that can be exploited by attackers to inject arbitrary Web script or HTML...
PHPOK frontend has SQL injection vulnerability
PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. PHPOK has a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive information in the database...
SQL Injection Vulnerability in the Frontend of Xinxiao Online Marking System
Xinkao Online Marking System is an online marking system for the majority of teachers and friends. Xinkao Online Marking System has a SQL injection vulnerability in the foreground, which can be exploited by attackers to obtain sensitive information from the database...
XSS vulnerability in X5music V2.0 frontend user folder do.php
X5music Music Management System is a music management system and video management system compiled with php+mysql. X5music V2.0 has an XSS vulnerability in the front user folder do.php, which can be exploited by attackers to obtain cookie information...
X5music Music Management System frontend ne***.php file has SQL injection vulnerability
X5music music management system is a set of open source music products. X5music music management system front ne.php file SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...
DEBIAN-CVE-2019-18678
An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches between a client and Squid with attacker-controlle...
CVE-2019-18678
An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches between a client and Squid with attacker-controlle...
Stored Cross-Site Scripting Vulnerability in ZrLog Frontend
ZrLog is a blog/CMS program developed in Java. A stored cross-site scripting vulnerability exists in the ZrLog frontend. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...
Logic flaw vulnerability in the frontend of S-CMS enterprise website builder system
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise station building system front platform there is a logic flaw vulnerability, attackers can use the vulnerability to...
Arbitrary file download vulnerability in frontend of shopxo e-commerce system
ShopXO is an open source enterprise-level open source e-commerce system. shopxo e-commerce system foreground exists arbitrary file download vulnerability , an attacker can exploit the vulnerability to download any file on the server...
XSS vulnerability in frontend of super cms v2.39
Super CMS content management system in order to solve the problem of website optimization and development of a set of products, it is an efficient open source content management system, the product is based on PHP + MYSQL architecture, can run on Windows, Linux, MacOSX, Solaris and other various...
XSS Vulnerability in the Frontend of the Kaixin Helpdesk System
The Kaixin Helpdesk Helpdesk helps IT to collect the problems handled on a daily basis and generate reports to quantify the work. An XSS vulnerability exists in the frontend of the Qixing Helpdesk system, which can be exploited by attackers to obtain administrator cookie information...
Information leakage vulnerability in the frontend of Yiqin General Attendance Management System V6.0
Easy attendance general attendance management system is researched and developed by Beijing Jinmapu Technology Development Co., Ltd. The system is based on B/S architecture and developed by VS.NET+SQLSERVER, which can complete the information browsing and information processing in the attendance...
SQL Injection Vulnerability in Yunye CMS Frontend
Yunye cms enterprise building system is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. Yunye CMS front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...
SQL Injection Vulnerability in Xingyunhai CMS Frontend
Xingyunhai CMS is a completely open source CMS content management system. Xingyunhai CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...
Backup File Download Vulnerability in UKcms Frontend
UKcms is a PHP-based content management system CMS by China Lingji Network Technology. A backup file download vulnerability exists in the frontend of UKcms. Under unauthorized circumstances, an attacker can exploit the vulnerability to construct links to directly download SQL backup information...
Stored Cross-site Scripting Vulnerability in Xionghai CMS Frontend Message Board Comments
Xionghai CMS is a set of comprehensive website management system that can be widely used in personal blogs, personal websites and corporate websites. Applicable to personal blogs, personal websites, corporate websites and other various purposes, the front end of the computer, mobile two display...
