NiuShop_b2c frontend Components.php has file upload vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShopb2c front Components.php file upload vulnerability exists. The vulnerability stems from the system'...

Cross-site Scripting Vulnerability in FineCMS

FineCMS is a content management system based on PHP+MySql development A cross-site scripting vulnerability exists in the frontend message board of FineCMS version 5.0.8, due to the program failing to filter user-submitted data. An attacker can exploit this vulnerability to inject arbitrary Web...

ourphp ourphp_filebox.php write any file vulnerability in frontend

OURPHP is a PHP+MySQL based development of W3C standard building system. ourphp v1.7.3 ourphpfilebox.php exists a write arbitrary file vulnerability in the frontend, due to the program fails to effectively examine the data submitted by visitors. Attackers use the vulnerability by writing Trojan...

Unauthorized operation vulnerability in 74cms frontend

74cms knight cms is a PHP-based open source professional talent system. 74cms has an override access vulnerability. Attackers can use the vulnerability to modify database information...

UBUNTU-CVE-2017-9129

The wavopenread function in frontend/input.c in Freeware Advanced Audio Coder FAAC 1.28 allows remote attackers to cause a denial of service large loop via a crafted wav file...

Freeware Advanced Audio Coder 'wav_open_read' Function Denial of Service Vulnerability

Freeware Advanced Audio Coder FAAC is a free audio coder. A security vulnerability exists in the 'wavopenread' function in the frontend/input.c file in FAAC version 1.28. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted wav file...

Code Execution Vulnerability in SDCMS Frontend

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. A code execution vulnerability exists in the frontend of SDCMS. An attacker can exploit this vulnerability to elevate user privileges...

SQL Injection Vulnerability in the Frontend of Axublog Blog System

axublog is a PHP personal blog system. A SQL injection vulnerability exists in the frontend of the Axublog blog system. An attacker can exploit this vulnerability to obtain sensitive database information...

Code Execution Vulnerability in FineCMS Frontend file and param parameters

FineCMS is a content management system based on PHP+MySql. A code execution vulnerability exists in the name and param parameters in the frontend of FineCMS version 5.0.7, which allows remote attackers to execute arbitrary code without logging in...

DBShop e-commerce system has SQL injection vulnerability in the frontend

DBShop based on PHP official ZendFramework 2 framework for the development of a new generation of e-commerce system. A SQL injection vulnerability exists in the frontend of DBShop e-commerce system. An attacker can exploit the vulnerability to obtain database information...

Two Pseudo-injection Vulnerabilities in WSTMart Frontend

WSTMart multi-user mall is a thinkphp5.0 for the core development of php multi-user B2B2C mall system. There are two pseudo-injection vulnerabilities in WSTMart frontend. An attacker can use this vulnerability to obtain database account password information...

Code Execution Vulnerability in FineCMS Frontend name and params Parameters

FineCMS is a content management system based on PHP+MySql. A code execution vulnerability exists in the name and params parameters in the frontend of FineCMS version 5.0.6, which allows remote attackers to execute arbitrary code without logging in...

Code Execution Vulnerability in FineCMS Frontend Mid Parameter

FineCMS is a content management system based on PHP+MySql. A code execution vulnerability exists in the frontend mid parameter of FineCMS version 5.0.6, which allows remote attackers to execute arbitrary code without logging in...

Design Vulnerability in ZZCMS 8.1 Frontend

ZZCMS is an enterprise website builder. A design vulnerability exists in the ZZCMS 8.1 frontend. An attacker is allowed to exploit the vulnerability to elevate privileges...

Code Execution Vulnerability in FineCMS Frontend

FineCMS is a content management system based on PHP+MySql. A code execution vulnerability exists in the frontend of FineCMS version 5.x, which can be exploited by an attacker to execute arbitrary code via a constructed statement...

Shining Flash cms Frontend Arbitrary User Login Vulnerability

Flash Flash cms is a flash website system developed by Zibo Flash Network Technology Co. Flash cms has a front-end arbitrary user login vulnerability. The vulnerability stems from the program's failure to filter user-submitted data, an attacker can use the vulnerability to bypass authentication t...

Stored xss vulnerability in jeecms latest v8.1 frontend

JEECMS is the domestic Java version of the open source web content management system java cms, jsp cms for short. jeecms latest version v8.1 front-end stored cross-site scripting vulnerability , an attacker can use the vulnerability to inject arbitrary Web script or HTML...

YxcmsAPP V1.4.3 Stored Cross-site Scripting Vulnerability at Frontend Guestbook

Yxcms is an enterprise building system based on PHP and mysql technology. YxcmsAPP V1.4.3 stored cross-site scripting vulnerability in the front-end guestbook. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to user hijacking...

mapr Information Disclosure

Hello, The mapr web frontend component creates an information disclosure vulnerability. During the setup of mapr the configure.sh script calls a function ConfigureWSRole: function ConfigureWSRole if $clientOnly -eq 0 -a $dontChangeSecurityPermissionsOn -eq 0 ; then ConfigureRunUserForWS fi This...

SQL injection vulnerability in mallbuilder frontend plugin_product_class.php page

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. A SQL injection vulnerability exists in the pluginproductclass.php page in the frontend of mallbuilder, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...