HCL Technologies HCL Sametime 代码问题漏洞

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6. The vulnerability stems from the fact that the user SID in the application can be modified, which can be exploited to modify the SID to enable arbitrary file...

CVE-2019-18642

Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile update feature. The lack of validation and use of sequential user IDs allows any user to change account details of any other user. This vulnerability could be used to change the...

Community Input Validation Error Vulnerability

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management.Community is one of the plug-ins that support users to create albums and add photos. A security vulnerability exists in Community versi...

ProConf Information Disclosure Vulnerability

ProConf is a conference management system. An information disclosure vulnerability exists in ProConf versions prior to 6.1. An attacker can exploit the vulnerability by changing the value of the Paper ID to view or gain access to submitted reports titles and abstracts and authors' personal...

StartBBS lightweight micro-community system suffers from an overstepping vulnerability

StartBBS Lightweight Micro Community System is an elegant, open source, lightweight community system based on Thinkphp 5.15 & Layui, with its own article system. A vulnerability exists in the "Personal Information Modification" section of StartBBS Lightweight Micro Community System. An attacker c...