ferry 路径遍历漏洞

ferry is lanyulei personal developer based on Gin + Vue + Element UI front-end and back-end separation of the work order system. There is a path traversal vulnerability in ferry, which originates from some unknown functionality in the apis/process/task.go file and can be exploited by an attacker ...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

Sql injection

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

Sql injection

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

PT-2022-8648 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection. It occurs via the /ucenter/reg.php API endpoint, specifically through the name parameter. Recommendations: For MKCMS version 6.2, as a temporary workaround, consider...

PT-2022-8650 · Mkcms · Mkcms

Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection via the "/ucenter/repass.php" API endpoint, specifically through the name parameter. This allows for potential exploitation. Recommendations: For MKCMS version 6.2, as a...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

CVE-2020-22820

MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter...

The vulnerability in the implementation of the account.php, login.php, and book_car.php scripts of the CMS system, Official Car Rental System, allows a violator to bypass security restrictions.

The vulnerability in the implementation of the account.php, login.php, and bookcar.php scripts of the Official Car Rental System relates to the lack of measures taken to protect the SQL query structure when processing parameters such as uname, pass, and id. Exploiting this vulnerability allows a...

PT-2022-26746 · Unknown · Vehicle Booking System

Name of the Vulnerable Software and Affected Versions: Vehicle Booking System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the v name parameter in the admin-add-vehicle.php file...

IBAX go-ibax SQL注入漏洞

IBAX go-ibax is a blockchain system platform from IBAX Corporation. IBAX go-ibax suffers from a SQL injection vulnerability that originates from some unknown functionality in file/api/v2/open/rowsInfo, where manipulation of the parameter tablename results in SQL injection...

CVE-2022-43169

A stored cross-site scripting XSS vulnerability in the Users Access Groups feature /index.php?module=usersgroups/usersgroups of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New...

CVE-2022-43166

A stored cross-site scripting XSS vulnerability in the Global Entities feature /index.php?module=entities/entities of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New Entity"...

CVE-2022-43164

A stored cross-site scripting XSS vulnerability in the Global Lists feature /index.php?module=globallists/lists of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add"...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Global Entities feature /index.php?module=entities/entities of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New Entity"...

Rukovoditel 跨站脚本漏洞

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other features. A cross-site scripting vulnerability exists in Rukovoditel version 3.2.1, which stems from the Name...

The vulnerability of Fabric Connectors in the Fabric View software module of the FortiTester, a software-hardware platform for diagnosing and auditing computer networks, as well as the FortiAnalyzer device for monitoring and analyzing security events, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Fabric Connector component in the FortiTester software, a hardware-based diagnostic and audit tool for computer networks, as well as the FortiAnalyzer tool for event monitoring and analysis, is related to the lack of protective measures taken for the web page structure wh...