SQL Injection Vulnerability in the Frontend Bi***.ashx Page of eDoc, an Electronic Document Repository

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic Document Library eDoc front Bi.ashx page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

SQL injection vulnerability in eDoc frontend ge***.aspx page of electronic document repository (CNVD-2019-01496)

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc front ge.aspx page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

Arbitrary File Download Vulnerability in eDoc Frontend of Electronic Document Library

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc foreground exists arbitrary file download vulnerability, attackers can use the vulnerability to obtain sensitive documents...

SQL Injection Vulnerability in Purchase Frontend ge***.aspx Page of Purchase System

Purchase system Purchase is a purchasing management system features include: product requisitioning, warehousing, inventory counts, data reports and more. A SQL injection vulnerability exists in the front-end ge.aspx page of Purchase, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in File System Profile Frontend ge***.aspx Page

The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the front-end ge.aspx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in File System Profile Frontend Bi***.ashx Page

The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the frontend Bi.ashx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2018-20370

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...

CVE-2018-20370

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...

CVE-2018-20370

SZ NetChat before 7.9 is vulnerable to Cross-Site Scripting in the Options module (MyName input). The root cause is an XSS flaw in the MyName field, allowing a remote attacker to inject inputs that could compromise the enabled HTTP server web frontend. The public references consistently describe ...

CVE-2018-20370: Improper Neutralization of Input During Web Page Generation

SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...

What happens when packages go bad?

I built spritecow.com back in 2011, and I no longer actively maintain it. A few months ago, a user berated me for using a crypto currency miner on the site without their informed consent. And sure enough, the site's JS had a small addition that loaded the mining JS, and sent the result somewhere...

Code Execution Vulnerability in Frontend of zzzcms V1.5.8 Official Version

zzcms is a free and open source building system, mainly facing the majority of webmasters use. zzzcms V1.5.8 official version of the foreground there is a code execution vulnerability, an attacker can use the vulnerability to obtain control of the web server...

Code Execution Vulnerability in FeiFeiCms Frontend

FeiFeiCms is developed with PHP+Mysql technology and can run on windows and Linux system platform. FeiFeiCms code execution vulnerability exists in the front-end, an attacker can exploit the vulnerability to obtain control of the web server...

CVE-2018-2502

CVE-2018-2502 affects SAP Business One Service Layer (B1_ON_HANA) with TRACE method enabled, enabling potential Cross Site Tracing (XST) when frontend applications expose an XSS vulnerability. The connected documents specify the vulnerable component as SAP Business One Service Layer and reference...

Denial of Service in Frontend Record Registration

More info at https://typo3.org/security/advisory/typo3-core-sa-2018-012...

Cross-Site Scripting in Frontend User Login

More info at https://typo3.org/security/advisory/typo3-core-sa-2018-008...

Denial of Service in Frontend Record Registration

More info at https://typo3.org/security/advisory/typo3-core-sa-2018-012...

Cross-Site Scripting in Frontend User Login

More info at https://typo3.org/security/advisory/typo3-core-sa-2018-008...

zzzcms v1.5.8 SQL Injection Vulnerability in Frontend in***.php File

zzcms is a free website builder developed in asp language. zzzcms v1.5.8 SQL injection vulnerability exists in the foreground in.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

S-CMS Enterprise Website Builder System SQL Injection Vulnerability in Frontend co***/fo***.php Page

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the front co/fo.php page of S-CMS enterprise website builder system. Attackers can use the...