4808 matches found
Cscms v3.53.5 SQL Injection Vulnerability in Frontend
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. Cscms v3.53.5 has a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive information from the database...
Web Application Penetration Testing Tool: Tracy
Tracy is a pentesting tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner. tracy should be used during the mapping-the-application phase of the pentest to identify sources of input and their corresponding outputs. tracy...
Cloud EC e-commerce system has multiple SQL injection vulnerabilities in the frontend
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system has multiple SQL injection vulnerabilities in the frontend. Attackers can use the...
Zulip Server Cross-Site Scripting Vulnerability (CNVD-2018-08600)
Zulip Server is a set of open source group chat application written in Python based on the Django framework . frontend markdown processor is one of the front-end markdown markup language processor . A cross-site scripting vulnerability exists in the frontend markdown processor in Zulip Server...
CVE-2018-9986
In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor...
Cross site scripting
In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor...
CVE-2018-9986
In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor...
ShopsN v2.2.6 SQL Injection Vulnerability on Frontend Page
ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. A SQL injection vulnerability exists in the front page of ShopsN v2.2.6 official...
The Firmware Analysis and Comparison Tool: FACT
The Firmware Analysis and Comparison Tool formerly known as Fraunhofer’s Firmware Analysis Framework FAF is intended to automate most of the firmware analysis process. It unpacks arbitrary firmware files and processes several analysis. Additionally, it can compare several images or single files...
SQL Injection Vulnerability in Frontend of gxlcmsqy System
GxlcmsQY system is a simple program tailored for business users. A SQL injection vulnerability exists in the frontend of the gxlcmsqy system. An attacker can exploit this vulnerability to obtain sensitive database information...
File upload vulnerability in kjcms frontend
kjcms is an internet and mobile internet based food ordering service reservation system. A file upload vulnerability exists in the kjcms frontend. The vulnerability is caused due to the upload file type and suffix can be controlled by the user, allowing an attacker to upload a webshell and gain...
ask2 Q&A system front user.php file exists arbitrary user password change vulnerability
ask2 Q&A is an open source PHP Q&A program. There is an arbitrary user password change vulnerability in the ask2 Q&A System frontend user.php file. An attacker can exploit the vulnerability to directly modify the password of the administrator user...
DuomiCms x3.0 frontend duomiphp/ajax.php file has SQL injection vulnerability
DuomiCms is a video-on-demand system designed for film and television station owners. DuomiCms x3.0 frontend duomiphp/ajax.php file has SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
File upload vulnerability in ask2 Q&A frontend
ask2 Q&A is an open source PHP Q&A program. A file upload vulnerability exists in the frontend of ask2 Q&A System. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
SQL Injection Vulnerability in DuomiCms x3.0 Frontend
DuomiCms is a video-on-demand system designed for film and television station owners. SQL injection vulnerability exists in DuomiCms x3.0 frontend. An attacker can exploit the vulnerability to obtain sensitive database information...
Cross-Site Scripting Vulnerability in EasySNS V1.6 Frontend
ESPHP development framework based on the development of EasySNS minimalist community for the new database architecture and program structure.ESPHP is a self-developed set of PHP source code framework. EasySNS V1.6 in the program implementation of cross-site scripting vulnerabilities, attackers ca...
EduaskCMS v1.0.7 Cross-site Scripting Vulnerability in Frontend
EduaskCMS is a free and open source content management system based on ThinkPHP 5.0.14+layui2.2.5 framework. EduaskCMS v1.0.7 frontend has a cross-site scripting vulnerability in the program implementation, the vulnerability is due to the system fails to adequately filter the incoming parameters...
