bdhckl.gov.bd Improper Access Control vulnerability OBB-2310171

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

S-CMS cross-site scripting vulnerability in Zibo Shining Network Technology Co.

S-CMS is a PHP and MySQL-based content management system CMS from S-CMS China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to execute cross-site scripting attack XSS via /function/booksave.php...

S-CMS Cross-Site Scripting Vulnerability in Zibo Shining Network Technology Co.

S-CMS is a PHP and MySQL based content management system CMS from Zibo Shining Network Technology Co., Ltd. in China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to perform cross-site scripting attacks XSS...

CVE-2020-20425

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...

CVE-2020-20426

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in /function/booksave.php...

CVE-2020-20425

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...

CVE-2020-20426

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in /function/booksave.php...

Cross site scripting

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...

Cross site scripting

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in /function/booksave.php...

CVE-2020-20426

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in /function/booksave.php...

CVE-2020-20426

S-CMS Government Station Building System v5.0 is affected by a cross-site scripting (XSS) vulnerability in /function/booksave.php. The issue is documented across multiple sources as a PHP/MySQL CMS vulnerability; the root cause is unvalidated input processed by that endpoint, enabling script exec...

CVE-2020-20425

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...

CVE-2020-20425

S-CMS Government Station Building System v5.0 (PHP/MySQL CMS) includes a cross-site scripting (XSS) vulnerability in the search function. The CVE description confirms XSS in this release; connected sources reiterate S-CMS v5.0 as affected and describe the vulnerability class. No root cause detail...

PYSA Emerges as Top Ransomware Actor in November

PYSA, which is also known by Mespinoza, has overtaken Conti as the top ransomware threat group for the month of November. It joined Lockbit, which has dominated the space since August. According to NCC Group’s November insights on the ransomware sector, PYSA increased its market share with a 50...

China suspends deal with Alibaba for not sharing Log4j 0-day first with the government

China's internet regulator, the Ministry of Industry and Information Technology MIIT, has temporarily suspended a partnership with Alibaba Cloud, the cloud computing subsidiary of e-commerce giant Alibaba Group, for six months on account of the fact that it failed to promptly inform the governmen...

CVE-2020-20426: Improper Neutralization of Input During Web Page Generation

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in /function/booksave.php...

CVE-2020-20425: Improper Neutralization of Input During Web Page Generation

S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...

PT-2021-10490

Name of the Vulnerable Software and Affected Versions: S-CMS Government Station Building System version 5.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /function/booksave.php API endpoint. Recommendations: For S-CMS Governmen...

PT-2021-10489

Name of the Vulnerable Software and Affected Versions: S-CMS Government Station Building System version 5.0 Description: The issue is related to a cross-site scripting XSS vulnerability in the search function. This means an attacker could potentially inject malicious scripts into the search...

S-CMS Cross-Site Script Vulnerabilities

S-CMS is a PHP and MySQL based content management system CMS from Zibo Shining Network Technology Co., Ltd. in China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to perform cross-site scripting attacks XSS...