Cross-site Scripting (XSS)

com.liferay.frontend.taglib is vulnerable to cross-site scripting XSS. The vulnerability exists because the attribute value in a bookmark URL is not escaped, allowing an attacker to inject malicious script through it...

File Upload Vulnerability in EarCMS Frontend

EarCMS is a PHP open source system. EarCMS has a file upload vulnerability in the frontend that can be exploited by an attacker to upload malicious files, the vulnerability can be used to gain server privileges...

Jfinal cms xss vulnerability at frontend feedback

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

Jfinal cms xss vulnerability at frontend user profile

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

Jfinal cms xss vulnerability at frontend comments

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

CVE-2019-3821

CVE-2019-3821 affects the civetweb frontend used by Ceph RGW when SSL is enabled. The issue allows an unauthenticated attacker to open multiple connections to the Ceph RADOS gateway, exhausting file descriptors on ceph-radosgw and causing remote denial of service. The vulnerability is due to cive...

Arbitrary file upload vulnerability in zzphp frontend

zzphp is a free website building system developed using PHP. zzzphp front-end arbitrary file upload vulnerability, an attacker can exploit the vulnerability to upload malicious files to obtain server privileges...

UBUNTU-CVE-2019-3821

A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw service resulting in a remote denial of service...

SQL Injection Vulnerability in Frontend of Haitong Network Digital Currency Trading Platform

Haitong Network Digital Currency Trading Platform is a digital currency trading platform. A SQL injection vulnerability exists in the frontend of Haitong Network Digital Currency Trading Platform, which can be exploited by attackers to obtain sensitive information from the database...

xss vulnerability in iCMS frontend

iCMS is an efficient and simple content management system built with PHP and MySQL. An xss vulnerability exists in the frontend of iCMS, which can be exploited by attackers to obtain an administrator cookie...

PayPal: Bypass for #488147 enables stored XSS on https://paypal.com/signin again

Due to a configuration in frontend, caching servers, it was possible for a researcher to use request smuggling to convert a page request into a cached redirect. If the cached redirect were accessed by a legitimate user, an attacker's content would be rendered instead of the requested page. While...

SemCms foreign trade website management system (PHP version) front co***.php page has xss vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website management system PHP version front co.php page there are xss...

WMCMS frontend has xss vulnerability

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS front-end xss vulnerability , attackers can use the vulnerability to obtain the administrator cookie...

SQL Injection Vulnerability in frontend of Polyglot cms

Polygraph cms is an open source content management system CMS. A SQL injection vulnerability exists in the front-end of Jukebox cms, which can be exploited by attackers to execute arbitrary code...

SQL Injection Vulnerability in FlarumChina Frontend

FlarumChina is an open source Chinese version of Flarum forum software. A SQL injection vulnerability exists in FlarumChina version v0.1.0-beta.7C. A remote attacker can exploit this vulnerability by sending a request to execute SQL commands...

SQL Injection Vulnerability in Super CMS Frontend in***.php Page

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

Command Execution Vulnerability in HYBBS Frontend

HYBBS is a MVC-structured program based on HYPHP framework. A command execution vulnerability exists in the frontend of HYBBS, which can be exploited by attackers to gain control of the web server...

WMCMS V4.250.513 SQL Injection Vulnerability in Frontend ca***.php Page

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS V4.250.513 SQL injection vulnerability exists in the front ca.php page, which can be exploited by attackers to obtain sensitive database information...

WMCMS V4.250.513 SQL Injection Vulnerability in Frontend pa***.php Page

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS V4.250.513 SQL injection vulnerability exists in the front pa.php page, which can be exploited by attackers to obtain sensitive database information...

WMCMS V4.250.513 SQL Injection Vulnerability in Frontend up***.php Page

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS V4.250.513 SQL injection vulnerability exists in the front-end up.php page, which can be exploited by attackers to obtain sensitive database information...