13497 matches found
CVE-2019-16642
CVE-2019-16642 affects TuziCMS 2.0.6. Affected component: App\Mobile\Controller\ZhuantiController.class.php, vulnerable to SQL injection via the index.php/Mobile/Zhuanti/group?id= parameter. Root cause described as unsafe handling of user input in ZhuantiController; impact includes data exposure ...
PT-2019-14732
Name of the Vulnerable Software and Affected Versions TuziCMS version 2.0.6 Description The issue concerns SQL injection in TuziCMS. Specifically, it affects the index.php/Mobile/Zhuanti/group?id= endpoint, where the id parameter is vulnerable to SQL injection attacks. This could potentially allo...
CVE-2019-16644: Improper Neutralization of Special Elements used in an SQL Command
App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring...
CVE-2019-16642: Improper Neutralization of Special Elements used in an SQL Command
App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring...
CVE-2019-15033: Server-Side Request Forgery (SSRF)
Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can specify an intranet address in the file parameter to index.php, when sending a file to a remote server, as demonstrated by the file=http%3A%2F%2F192.168.1.2 substring...
CVE-2019-16310
NIUSHOP V1.11 has XSS via the index.php?s=/admin URI...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
Cross site request forgery (csrf)
NIUSHOP V1.11 has CSRF via searchinfo to index.php...
Design/Logic Flaw
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
Design/Logic Flaw
NIUSHOP V1.11 has XSS via the index.php?s=/admin URI...
CVE-2019-16310
NIUSHOP V1.11 has XSS via the index.php?s=/admin URI...
CVE-2019-16310
CVE-2019-16310 affects NIUSHOP V1.11 with an XSS vulnerability via the index.php?s=/admin URI. The connected records do not provide payloads, affected sub-versions beyond V1.11, remediation steps, or explicit exploit details. CVSS metrics are provided (NVD CVSSv2 base 3.5, CVSSv3.1 base 5.4). Act...
CVE-2019-16311
NIUSHOP V1.11 has CSRF via searchinfo to index.php...
CVE-2019-16311
CVE-2019-16311 : NIUSHOP V1.11 has a CSRF vulnerability via search_info to index.php. The connected sources cite a high-severity issue (CVSSv3.1 base score 8.8) with network access and required user interaction, but no exploitation details are provided in the documents.
CVE-2019-16312
CVE-2019-16312 affects s-cms v3.0 with a stored/reflected XSS in index.php?type=text via the S_id parameter. The Red Hat and NVD entries confirm the same description; public details are limited to the XSS path and parameter, with no explicit exploitation vectors or patched versions provided in th...
PT-2019-14620
Name of the Vulnerable Software and Affected Versions NIUSHOP version 1.11 Description The issue allows for CSRF via the search info parameter to the "/index.php" API endpoint. Recommendations For NIUSHOP version 1.11, consider implementing CSRF protection mechanisms, such as token-based...
PT-2019-14619
Name of the Vulnerable Software and Affected Versions NIUSHOP version 1.11 Description The issue is related to a security problem where an attacker can inject malicious code. The problem occurs via the "index.php?s=/admin" API endpoint. Recommendations For NIUSHOP version 1.11, update to a versio...
CVE-2019-16310: Improper Neutralization of Input During Web Page Generation
NIUSHOP V1.11 has XSS via the index.php?s=/admin URI...