CVE-2015-4085

Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1...

CVE-2015-4085

CVE-2015-4085 is a directory traversal vulnerability in Etherpad frontend tests (node/hooks/express/tests.js) affecting Etherpad frontend tests prior to version 1.6.1. Exploitation could allow an attacker to browse files, impacting confidentiality (Partial). The issue is documented across multipl...

CVE-2015-4085

Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1...

SQL Injection Vulnerability in BuliderOrder Method in Frontend of ShopsN 2.0 Official Version

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. A SQL injection vulnerability exists in the BuliderOrder method in the frontend of...

Cross-site Scripting Vulnerability in Qibo CMS Frontend

Qibo CMS is a multifunctional modular website management system that combines articles, downloads, pictures, classifieds, videos, shopping malls, music, blogs, talents, Q&A and other modules. A cross-site scripting vulnerability exists in the front-end of Qibo CMS, where an attacker can construct...

ShopsN 2.0 official version of the foreground collection_del method SQL injection vulnerability

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system. A SQL injection vulnerability exists in the collectiondel method in the frontend of ShopsN...

EBCMS (Enterprise Website Version) v4.2 SQL Injection Vulnerability in Frontend Index.php Page

EBCMS short for EBCMS is a modular plug-in website management system based on PHP+Mysql. A SQL injection vulnerability exists in the Index.php page in the frontend of EBCMS Enterprise Website Edition v4.2. The vulnerability is due to the system failing to effectively filter user-submitted data. A...

File upload vulnerability in frontend of sentcms v3.0.170127

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. SentCMS v3.0.170127 has a file upload vulnerability, due to the system fails to strictly detect the editor function when uploading files. A remote attacker can use th...

Arbitrary User Login Vulnerability in S-CMS Frontend

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is an arbitrary user login vulnerability in the frontend of S-CMS. The vulnerability stems from the failure of the program to filter the data submitted by the user, an attacker can use the...

ShopsN v3.0 SQL Injection Vulnerability in Frontend UserSetController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 front-end UserSetController.class.php file has a SQL injection vulnerability . As the system fails to effectively filter the addressajax function. A remote attacker can exploit the vulnerability to obtain sensitive database information...

WeiPHP v4.0 beta SQL Injection Vulnerability in Frontend AppsLinkController.class.php Page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP v4.0 beta SQL injection vulnerability exists in the front-end AppsLinkController.class.php page. The vulnerability is due to the public function del...

ShopsN v3.0 SQL Injection Vulnerability in Frontend SpecialBusinessController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 beta3 version SpecialBusinessController.class.php file contains a SQL injection vulnerability due to the system fails to effectively filter the placeorder function. A remote attacker can exploit the vulnerability to obtain sensitive...

Gxlcms Audiobook System v1.0 SQL Injection Vulnerability in Frontend getrecomm Function

Gxlcms audiobook system is a simple to use, provide listening to the network resource station to provide free collection nodes. A SQL injection vulnerability exists in the frontend getrecomm function in Gxlcms Audiobook System v1.0 bulid 20170714, due to the system failing to strictly filter...

Gxlcms audiobook system v1.0 frontend CommAction.class.php has SQL injection vulnerability

Gxlcms audiobook system is a simple to use, provide listening to the network resource station to provide free collection nodes. Gxlcms Audiobook System v1.0 bulid 20170714 SQL injection vulnerability exists in CommAction.class.php in the foreground due to the system's failure to strictly filter...

Cross-site scripting vulnerability in CmsEasy frontend

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. A cross-site scripting vulnerability exists in the CmsEasy frontend, which can be exploited by attackers to execute arbitrary JavaScript code...

OneThink Frontend Cache Mechanism Has Design Flaw Vulnerability

OneThink is an open source content management framework developed by ThinkPHP team based on ThinkPHP. OneThink front-end caching mechanism has a design flaw vulnerability. Since the program caches registered usernames to a cache file in the temp directory, and the cache file has executable...

Duomi (DuomiCms) Movie and TV Management System V1.32 SQL Injection Vulnerability in the Frontend

DuomiCms is a video-on-demand system designed for film and television station owners. Duomi DuomiCms Movie and TV Management System V1.32 SQL injection vulnerability exists in the foreground. The vulnerability is due to the system cardpwd variable does not filter the data submitted by the user, a...

SQL Injection Vulnerability in SDMCS V1.1 Frontend

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDMCS V1.1 SQL injection vulnerability exists in the front-end, due to the system does not effectively filter the data submitted by the user, the attacker can exploit the vulnerability to obtain sensitiv...

DzzOffice v1.3.1 SQL Injection Vulnerability in Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . A SQL injection vulnerability exists in DzzOffice v1.3.1 due to the program failing to strictly filter the keyword parameter...

File Upload Vulnerability in DzzOffice v1.3.1 Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . A file upload vulnerability exists in DzzOffice v1.3.1 due to the program failing to strictly filter the $GET'tpath' parameter. ...