Shenzhen good business network studio Hsycms file upload vulnerability

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Shenzhen Good Business Network Studio Hsycms has a file upload vulnerability that can be exploited by attackers to gain control o...

SQL Injection Vulnerability in Hsycms Frontend

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Hsycms suffers from a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive...

Stored Cross-site Scripting Vulnerability in Hsycms Frontend Messages

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. A stored cross-site scripting vulnerability exists in the Hsycms frontend message. An attacker can insert malicious js code into...

Hsycms SQL Injection Vulnerability

Hsycms is a content management system CMS based on ThinkPHP. The system has features such as in-site linking, site map, full-site pseudo-static and custom URL URLs. A SQL injection vulnerability exists in Hsycms V1.1. The vulnerability stems from the lack of validation of externally entered SQL...

CVE-2019-10653

An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/.html page...

CVE-2019-10653

An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/.html page...

Sql injection

An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/.html page...

CVE-2019-10653

An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/.html page...

CVE-2019-10653

Hsycms v1.1 contains a SQL injection vulnerability in the /news/*.html page. The root cause is unsanitized/externally entered SQL statements in the database-layer handling of news pages (per CNVD/Red Hat/CVE descriptions). Exploitation could compromise data confidentiality, integrity, and availab...

Hsycms v1.1 suffers from SQL Injection Vulnerability

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Hsycms v1.1 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database...

HSYCMS suffers from arbitrary file download vulnerability

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. An arbitrary file download vulnerability exists in HSYCMS, which can be exploited by attackers to obtain sensitive file informati...

Hsycms Cross-Site Scripting Vulnerability

Hsycms is a content management system CMS based on ThinkPHP. The system has features such as in-site linking, site map, full-site pseudo-static and custom URL URLs. A cross-site scripting vulnerability exists in Hsycms V1.1, which can be exploited by remote attackers to inject arbitrary web scrip...

Cross site scripting

An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page...

CVE-2019-9145

An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page...

CVE-2019-9145

An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page...

CVE-2019-9145

An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page...

CVE-2019-9145

CVE-2019-9145 — Normal mode Vulnerability: In Hsycms V1.1, there is a cross-site scripting (XSS) flaw via the name field on the /book page. The root cause is insufficient sanitization/validation of user-supplied input in that field, allowing injected script or HTML to be rendered by an attacker-c...

Hsycms V1.1 has xss vulnerability

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. An xss vulnerability exists in Hsycms V1.1, which stems from a failure to filter user-submitted data and can be exploited by an...

SQL Injection Vulnerability in Hsycms V1.1 co***.php Page

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. A SQL injection vulnerability exists in the co.php page of Hsycms V1.1, which can be exploited by attackers to obtain sensitive...