5736 matches found
Logic flaw vulnerability in the frontend of S-CMS enterprise website builder system
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise station building system front platform there is a logic flaw vulnerability, attackers can use the vulnerability to...
Arbitrary file download vulnerability in frontend of shopxo e-commerce system
ShopXO is an open source enterprise-level open source e-commerce system. shopxo e-commerce system foreground exists arbitrary file download vulnerability , an attacker can exploit the vulnerability to download any file on the server...
XSS vulnerability in frontend of super cms v2.39
Super CMS content management system in order to solve the problem of website optimization and development of a set of products, it is an efficient open source content management system, the product is based on PHP + MYSQL architecture, can run on Windows, Linux, MacOSX, Solaris and other various...
XSS Vulnerability in the Frontend of the Kaixin Helpdesk System
The Kaixin Helpdesk Helpdesk helps IT to collect the problems handled on a daily basis and generate reports to quantify the work. An XSS vulnerability exists in the frontend of the Qixing Helpdesk system, which can be exploited by attackers to obtain administrator cookie information...
SQL Injection Vulnerability in Yunye CMS Frontend
Yunye cms enterprise building system is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. Yunye CMS front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...
Information leakage vulnerability in the frontend of Yiqin General Attendance Management System V6.0
Easy attendance general attendance management system is researched and developed by Beijing Jinmapu Technology Development Co., Ltd. The system is based on B/S architecture and developed by VS.NET+SQLSERVER, which can complete the information browsing and information processing in the attendance...
SQL Injection Vulnerability in Xingyunhai CMS Frontend
Xingyunhai CMS is a completely open source CMS content management system. Xingyunhai CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...
Backup File Download Vulnerability in UKcms Frontend
UKcms is a PHP-based content management system CMS by China Lingji Network Technology. A backup file download vulnerability exists in the frontend of UKcms. Under unauthorized circumstances, an attacker can exploit the vulnerability to construct links to directly download SQL backup information...
Stored Cross-site Scripting Vulnerability in Xionghai CMS Frontend Message Board Comments
Xionghai CMS is a set of comprehensive website management system that can be widely used in personal blogs, personal websites and corporate websites. Applicable to personal blogs, personal websites, corporate websites and other various purposes, the front end of the computer, mobile two display...
CVE-2010-3674
TYPO3 before 4.4.1 allows XSS in the frontend search box...
Design/Logic Flaw
TYPO3 before 4.4.1 allows XSS in the frontend search box...
CVE-2010-3674
TYPO3 before 4.4.1 allows XSS in the frontend search box...
CVE-2010-3674
TYPO3 before 4.4.1 allows XSS in the frontend search box...
CVE-2010-3674
TYPO3 before 4.4.1 allows XSS in the frontend search box...
CVE-2010-3674
TYPO3 (CMS/CMF) versions before 4.4.1 are affected by a cross-site scripting (XSS) vulnerability in the frontend search box. The issue arises from lack of proper validation of client-side data, enabling an attacker to inject scripts that run in a user’s browser. The available connected sources co...
PT-2019-6578
Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 4.4.1 Description The issue allows for XSS in the frontend search box. Recommendations For versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue...
CVE-2010-3674: Improper Neutralization of Input During Web Page Generation
TYPO3 before 4.4.1 allows XSS in the frontend search box...
CVE-2010-3669
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...