DzzOffice v1.3.1 Arbitrary File Download Vulnerability in Frontend

DzzOffice is a cloud storage management tool , based on the free open source release , can be used as a personal network disk , team , enterprise network disk for use . DzzOffice v1.3.1 front-end arbitrary file download vulnerability exists due to the program fails to share path parameter for...

SDCMS V1.1 Arbitrary Administrator Addition Vulnerability in Frontend

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDCMS V1.1 foreground exists arbitrary administrator to add a vulnerability, an attacker can use the vulnerability in the foreground to arbitrarily add an administrator account...

ShopsN v3.0 SQL Injection Vulnerability in Frontend ProductController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 beta3 version ProductController.class.php file contains a SQL injection vulnerability , due to the system failed to strictly filter the guess function . Remote attackers can exploit the vulnerability to obtain sensitive database...

Multiple vulnerabilities in phpcms V9 front and backend

PHPCMS is a web content management system based on PHP and Mysql architecture. PHPCMS V9.6.3 backend has a reflective XSS and SQL injection vulnerability that can bypass the CSRF defense and upload any script file under certain conditions...

Stored Cross-Site Scripting Vulnerability in the Frontend of MCMS (Minfy MS Platform)

MCMS MFMS platform is a content management system that supports different platforms, different terminals and multi-sites, developed by MF Technology Co. A stored cross-site scripting vulnerability exists in the front-end of MCMS MS-MCMS. The vulnerability is due to peopleUserRealName failed to...

LAME Denial of Service Vulnerability (CNVD-2017-20144)

LAME is LAME team developed a set of open source MP3 audio compression software . A denial of service vulnerability exists in the 'unpackreadsamples' function in the frontend/getaudio.c file in LAME version 3.99.5. A remote attacker can exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

UBUNTU-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

ALPINE-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

SQL Injection Vulnerability in ZZCMS Version 8.1

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the frontend of ZZCMS version 8.1, which can be exploited by attackers to obtain administrator accounts and passwords...

SQL Injection Vulnerability in finecms Frontend num Parameter

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend num parameter of finecms. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in finecms Frontend Field Parameters

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A SQL injection vulnerability exists in the frontend field parameter of finecms. An attacker can exploit this vulnerability to obtain database information...

SQL Injection Vulnerability in Hdwiki 6.0 Frontend

Interactive Wiki open source system HDwiki is by the interactive online Beijing Technology Co., Ltd. launched a free wiki Wiki building system. wiki6.0 'control/ list.php' SQL injection vulnerability exists, the vulnerability stems from the failure to effectively filter user-submitted data, remot...

CVE-2017-11475

GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php...

[SECURITY] Fedora 26 Update: irssi-1.0.4-1.fc26

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

DuomiCms 1.32 Command Execution Vulnerability in Frontend

DuomiCms is a specialized video-on-demand system. A command execution vulnerability exists in DuomiCms 1.32 frontend. An attacker can exploit this vulnerability to execute arbitrary php statements or system commands...

F5 with StoreFront session timeout closing active sessions

When the StoreFront session times out, it's closing active ICA sessions. We found the issue is only happening when authenticating via F5 frontend. When Authenticating via F5. After 20 minutes the Citrix Desktop and storefront session shuts down. After 17 minutes, a 3 mins countdown starts in the...

[SECURITY] Fedora 25 Update: irssi-1.0.3-1.fc25

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

[SECURITY] Fedora 25 Update: zabbix-3.0.9-1.fc25

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechan ism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...