53 matches found
CVE-2023-30123
wuzhicms v4.1.0 is vulnerable to Cross Site Scripting XSS in the Member Center, Account Settings...
CVE-2023-30123
wuzhicms v4.1.0 is vulnerable to Cross Site Scripting XSS in the Member Center, Account Settings...
CVE-2023-30123
wuzhicms v4.1.0 is vulnerable to Cross Site Scripting XSS in the Member Center, Account Settings...
CVE-2020-25967
The member center function in fastadmin V1.0.0.20200506beta is vulnerable to a Server-Side Template Injection SSTI vulnerability...
Sql injection
The member center function in fastadmin V1.0.0.20200506beta is vulnerable to a Server-Side Template Injection SSTI vulnerability...
CVE-2020-25967
The member center function in fastadmin V1.0.0.20200506beta is vulnerable to a Server-Side Template Injection SSTI vulnerability...
Stored Cross-Site Scripting Vulnerability in CupCMS Member Center
CupCMS is a content management system that integrates video, stars, news, comics, community and more. A stored cross-site scripting vulnerability exists in CupCMS Member Center, which can be exploited by attackers to obtain sensitive information such as user cookies...
SQL Injection Vulnerability in YYcms Member Center
YYCMS movie and television, rain rain CMS movie and television, is a fully automatic collection of video sites. YYcms member center has SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
SQL injection vulnerability in freecms member center (CNVD-2020-33179)
FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in freecms member center (CNVD-2020-33180)
FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in freecms Member Center
FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in freecms member center (CNVD-2020-33181)
FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in freecms member center (CNVD-2020-33184)
FreeCMS is a secure, practical effective and scalable CMS system. A SQL injection vulnerability exists in FreeCMS Member Center, which can be exploited by attackers to obtain sensitive information from the database...
Stored Cross-Site Scripting Vulnerability in JEECMS Version 9.3
JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...
Tpshop Mall Member Center Multiple SQL Injection Vulnerabilities
TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . Tpshop mall member center in many places there are SQL injection vulnerabilities. Attackers can use the vulnerability to obtain sensitiv...
SQL Injection Vulnerability in State Micro CMS Member Center
State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. A SQL injection vulnerability exists in the member center of State Micro CMS. The vulnerability is due to the failure of the system to...
DEDECMS member center code submit defects can getshell
Preface : dedecms this year to update a lot of patches,the present article selected 20170315 patch for learning and research. Body: From the official website to download DEDECMS 20170315 patch using DIFF comparison tools for comparison: See the Red part, the servermsg1 variables appearing in dede...
XSS vulnerability in ourphp
OURPHP is a PHP+MySQL based development of W3C standard building system. There is an xss vulnerability in OurPHP member center, which can be exploited by attackers to obtain administrator cookies...
OurPHP member center xss vulnerability
No description provided by source...
x5music V2.0 Member Center Injection Vulnerability
x5music Free Edition is an audio-visual management system developed using php+Mysql. x5music V2.0 Free Edition has an injection vulnerability in the member center. As X5music uses a global escape filter, nickname characters are taken out of the database and not processed, resulting in data that c...