PT-2019-12826 · Otrs +2 · Otrs +2

Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 7.0.x through 7.0.8 Open Ticket Request System OTRS Community Edition versions 6.0.x through 6.0.19 Open Ticket Request System OTRS Community Edition versions 5.0.x through 5.0.36 Description: An issue...

PHPOK Enterprise Building System v5.2.116 SQL Injection Vulnerability in Frontend

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. PHPOK Enterprise Station Building System v5.2.116 has a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive database information...

xss vulnerability in jeeweb frontend

JeeWeb is an agile development system based on SpringBoot 2+Spring+Mybatis+Hibernate An xss vulnerability exists in the frontend of jeeweb, which can be exploited by an attacker to obtain an administrator cookie...

Security Misconfiguration in User Session Handling

When users change their password existing sessions for that particular user account are not revoked. A valid backend or frontend user account is required in order to make use of this vulnerability...

Storage-based Cross-site Scripting Vulnerability in the Frontend of Feifei Movie Navigation System

FeiFeiCms is developed by PHP+Mysql technology and can run on windows and Linux system platform. A stored cross-site scripting vulnerability exists in the frontend of FeiFeiCms. Attackers can insert malicious js code into the page to obtain user cookies and other information, resulting in user...

SQL Injection Vulnerability in dhcms Frontend

dhcms is an enterprise building system. A SQL injection vulnerability exists in the frontend of dhcms, which can be exploited by attackers to obtain sensitive database information...

PT-2019-12310

Name of the Vulnerable Software and Affected Versions OpenKM versions 6.3.2 through 6.3.7 Description The issue allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home directory of the site. This is achieved by exploiting the Filesystem path...

CVE-2019-11445: Unrestricted Upload of File with Dangerous Type

OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home directory of the site, via frontend/FileUpload and admin/repositoryexport.jsp. This is achieved by interfering with the Filesystem path control in the admin's...

PHPOK enterprise website builder system has SQL injection vulnerability

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A SQL injection vulnerability exists in the frontend of PHPOK Enterprise CMS version 5.2.060. An attacker can exploit this vulnerability to obtain sensitive database information...

Stored Cross-Site Scripting Vulnerability in JYmusic Frontend

JYmusic is an open source cross-platform music management system. JYmusic frontend has a stored cross-site scripting vulnerability, an attacker can insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...

Stored cross-site scripting vulnerability in JYmusic frontend (CNVD-2019-13273)

JYmusic is an open source cross-platform music management system. JYmusic frontend has a stored cross-site scripting vulnerability, an attacker can insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...

Stored cross-site scripting vulnerability in JYmusic frontend (CNVD-2019-13271)

JYmusic is an open source cross-platform music management system. JYmusic frontend has a stored cross-site scripting vulnerability, an attacker can insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...

Stored cross-site scripting vulnerability in JYmusic frontend (CNVD-2019-13272)

JYmusic is an open source cross-platform music management system. JYmusic frontend has a stored cross-site scripting vulnerability, an attacker can insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...

xss vulnerability in frontend comment manager of fishleap CMS

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. An XSS vulnerability exists in the front-end comment management system of FishCenter CMS, which can be exploited by an attacker to obtain an administrator cookie...

XSS Vulnerability in FishLeap CMS Frontend Comments List

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. An XSS vulnerability exists in the front-end comment list of FishCare CMS, which can be exploited by an attacker to obtain an administrator cookie...

XSS Vulnerability in Fish Leap CMS Frontend at Comments

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. An XSS vulnerability exists in the front-end comments of FishCenter CMS, which can be exploited by an attacker to obtain an administrator cookie...

PYSEC-2019-201

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

UBUNTU-CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

File Upload Vulnerability in ArtCMS Frontend User Modified Avatar Location

ArtCMS is a website management system. A file upload vulnerability exists in ArtCMS at the location where the front-end user modifies his avatar. It allows attackers to upload a webshell and gain server privileges...

Cross-site Scripting (XSS)

com.liferay.frontend.taglib is vulnerable to cross-site scripting XSS. The vulnerability exists because the attribute value in a bookmark URL is not escaped, allowing an attacker to inject malicious script through it...