SUSE-SU-2021:14705-1 Security update for tomcat6

This update for tomcat6 fixes the following issues: - CVE-2021-25329: Fixed completely CVE-2020-9484 bsc1182909. - CVE-2021-24122: Fixed an information disclosure bsc1180947. - CVE-2017-12617: Fixed a file inclusion vulnerability through a crafted request bsc1059554...

RGCMS has a file inclusion vulnerability

RGCMS is an open source building management system. RGCMS has a file inclusion vulnerability that can be exploited by an attacker to gain server privileges...

File Containment Vulnerability in Hangzhou New CUHK Netcallserver Management Console

Founded in 1993, Hangzhou Xinzhongda Technology Co., Ltd. is a professional information technology solution provider in the fields of project management, intelligent construction, financial and tax management, and government finance management. A file inclusion vulnerability exists in the Hangzho...

File Containment Vulnerability in Panavision e-message Management Interface

Ltd. was founded in 2001, headquartered in Shanghai, focusing on the field of collaborative management software, and is committed to collaborative OA as the core to help enterprises build a unified mobile office platform. A file inclusion vulnerability exists in the Panmicro e-message management...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 File Containment Vulnerability

Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A local file inclusion vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by a remote attacke...

File Containment Vulnerability in EaseUS Web Authentication System

EaseUS Web Authentication System is a user management system structured in PHP+Mysql. A file inclusion vulnerability exists in EaseUS Web Authentication System. An attacker can exploit this vulnerability to gain server privileges...

CVE-2020-22474

In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion...

Redwood Report2Web File Inclusion Vulnerability

Redwood Report2Web is a web platform from Redwood Corporation that provides users with automated report generation capabilities. A file inclusion vulnerability exists in Redwood Report2Web version 4.3.4.5, which originates from a vulnerability that allows remote attackers to present external...

FHEM File Inclusion Vulnerability

FHEM is a Perl-based server-side program from the FHEM community for controlling smart devices for house automation. The program runs as a server and you can control it directly via web or smartphone front-end, telnet or TCP / IP to automate some common tasks in your home, such as switching on/of...

File Containment Vulnerability in netcall of Hangzhou Xinzhongda Technology Co.

netcall is based on the open source communication protocol xmpp development of instant messaging software . A file inclusion vulnerability exists in netcall of Hangzhou New CU Technology Co. Ltd, which can be exploited by an attacker to obtain the highest privileges on the system...

File Inclusion Vulnerability in Knight CMS Frontend

Knight Talent System is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. A file inclusion vulnerability exists in the frontend of Knight CMS, which can be exploited by attackers to cause the inclusion of files to execute arbitrary code...

CVE-2020-26958

Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could lead to a cross-site script inclusion vulnerability, or a Content Security Policy bypass. This vulnerability affects Firefox 83, Firefox ESR 78.5,...

File Inclusion Vulnerability in waychar Enrollment System

Waychar Registration System is a free race registration system. A file inclusion vulnerability exists in the waychar registration system that can be exploited by attackers to obtain sensitive information...

File Containment Vulnerability in MetInfo Enterprise Website Builder (CNVD-2020-58396)

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

File Containment Vulnerability in MetInfo Enterprise Website Builder (CNVD-2020-58429)

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

File Containment Vulnerability in Tongda OA11.2

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. A file inclusion vulnerability exists in Tongda OA11.2, which can be exploited by an attacker to obtain server administrative privileges...

CVE-2020-8339

A cross-site scripting inclusion XSSI vulnerability was reported in the legacy IBM BladeCenter Advanced Management Module AMM web interface prior to version 3.68n BPET68N. This vulnerability could allow an authenticated user's AMM credentials to be disclosed if the user is convinced to visit a...

File Containment Vulnerability in Destoon B2B Content Management System Backend (CNVD-2020-50908)

DESTOON® B2B Website Management System is an open source B2B e-commerce industry portal solution based on PHP+MySQL. A file inclusion vulnerability exists in the backend of the Destoon B2B content management system, which can be exploited by attackers to gain server administrative privileges...

File Containment Vulnerability in Taiwan's Yilan B&B Travel Website

Yilan B&B travel network provides Yilan all B&B, accommodation, hotel business travel related information, collection of Yilan countryside idyllic B&B, Yilan coast B&B and so on. A file inclusion vulnerability exists in the Taiwan Yilan B&B Tourism website. An attacker can exploit the vulnerabili...

File inclusion vulnerability in HisiPHP me***.php file

HisiPHP is based on ThinkPHP5 + Layui development of a set of free WEB open source framework. HisiPHP me.php file file inclusion vulnerability. Attackers can use the vulnerability to obtain server privileges...