75 matches found
CVE-2019-6249_Hucart-cms
CVE-2019-6249Hucart cms 一、漏洞摘要 漏洞名称: Hucart cms v5.7.4 CSRF漏洞可任意增加管理员账号 上报日期: 2019-01-13 漏洞发现者: AllenChen（[email protected]） 产品首页: http://www.hucart.com/ 软件链接: http://www.hucart.com/ 版本: v5.7.4 CVE编号: CVE-2019-6249\ 二、漏洞概述 Hucart cms v5.7.4版本存在一个CSRF漏洞，当管理员登陆后访问下面CSRF测试页面可增加一个名为hack的管理员账号。...
EUVD-2020-10400
Malware in sbrugna...
EUVD-2019-15816
Malware in sbrugna...
EUVD-2020-10085
Malware in sbrugna...
EUVD-2020-10401
Malware in sbrugna...
EUVD-2018-11157
Malware in sbrugna...
EUVD-2020-10399
Malware in sbrugna...
CVE-2020-18475
Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...
CVE-2020-18158
Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...
CVE-2020-18477
SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...
CVE-2020-18476
SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...
CVE-2020-18475
Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...
CVE-2020-18476
SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...
CVE-2020-18477
SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...
CVE-2020-18475
Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...
CVE-2020-18476
SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...
CVE-2020-18477
SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...
Sql injection
SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...
Cross site scripting
Cross Site Scripting XSS vulnerabilty exists in Hucart CMS 5.7.4 is via the mestitle field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed...