12 matches found
EUVD-2020-3013
Malware in sbrugna...
Cross site scripting
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20345
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20345: Improper Neutralization of Input During Web Page Generation
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-18964
Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...
CVE-2020-18964
Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...
CVE-2020-18964: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...
PT-2021-10257
Name of the Vulnerable Software and Affected Versions: ForestBlog version latest Description: A Cross Site Request Forgery CSRF issue exists, allowing a remote malicious user to gain privileges via the website Management background. Recommendations: For ForestBlog version latest, update to a...
PT-2020-12203
Name of the Vulnerable Software and Affected Versions Xiaomi Mi Jia ink-jet printer versions prior to 3.4.6 0138 Description An issue was discovered in the Xiaomi Mi Jia ink-jet printer, where injecting parameters to the ippserver through the web management background results in command execution...
Shenzhen JetVision Technology Co., Ltd. video conferencing system has an overstepping access vulnerability
Shenzhen JetVision Technology Co., Ltd. video conferencing system is a new set of video conferencing communication system for customers in different industries to meet their video communication needs. There is an override access vulnerability in the video conferencing system of Shenzhen JetVision...
SiteEngine 6.0 &7.1 SQL injection vulnerability-vulnerability warning-the black bar safety net
Title: SiteEngine 6.0 SQL injectionvulnerability Date: 2010-11-25 Author: Beach Team: www.linux520.com Vendors: www.siteengine.netwww.boka.cn Keywords: "Powered by SiteEngine" //300,000 + Description: The use of this vulnerability requires that the comment function is turned ONON by default The u...
Focus technology:Google you really good(Google Hack)-vulnerability warning-the black bar safety net
In fact, earlier should be issued to, domestic about google tips aspects of finishing, I probably was one of the first people right, then sniper write a google hack, they're more lazy. Now help wives find the papers, the keyword matching tired of death. These tips are my finishing after the...