3288 matches found
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15629)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the activatereplicaVTLcontainer method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands via the container name...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15631)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Diagnostics" method in Quest DR Series Disk Backup Software before 4.0.3.1. The vulnerability can be exploited to execute commands via the 'filename' parameter...
CVE-2018-11649
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
CVE-2018-11649
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
DomainMod cross-site scripting vulnerability (CNVD-2018-10863)
DomainMod is a PHP and MySQL based open source application for managing centrally located domain names and other Internet assets. A cross-site scripting vulnerability exists in DomainMod version 4.10.0. A remote attacker can exploit this vulnerability to execute JavaScript code with the help of t...
Moxa EDR-810 Command Injection Vulnerability (CNVD-2018-11721)
The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. A command injection vulnerability exists in the web server functionality of the Moxa EDR-810 V4.1 build 17030317. The vulnerability can be exploited to...
TP-Link EAP Controller and Omada Controller Cross-Site Scripting Vulnerability (CNVD-2018-09302)
TP-Link EAP Controller and Omada Controller are both software from China P&L TP-LINK for remote control of wireless AP access point devices. A cross-site scripting vulnerability exists in TP-Link EAP Controller and Omada Controller versions 2.5.4Windows and 2.6.0Windows. A remote attacker can...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-09306)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit thi...
CVE-2018-10680
Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web site settings -- Basic setting -- Website title" and enters an XSS payload via the zbsystem/cmd.php ZCBLOGNAME parameter. NOTE: the vendor disputes the security relevance, noting ...
CVE-2018-10469
b3log Symphony aka Sym 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name parameter to the /upload URI...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08555)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08554)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
Apache Fineract SQL Injection Vulnerability (CNVD-2018-09807)
Apache Fineract is the United States Apache Apache Software Foundation's set of open source digital financial services platform. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. An SQL injection...
joyplus-cms cross-site scripting vulnerability (CNVD-2018-08698)
joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A cross-site scripting vulnerability exists in...
CVE-2018-10096
joyplus-cms 1.6.0 has XSS via the devicename parameter in a manager/adminajax.php?action=save flag=add request...
joyplus-cms cross-site scripting vulnerability
joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A cross-site scripting vulnerability exists in...
CVE-2018-8767
joyplus-cms 1.6.0 has XSS in manager/adminajax.php?action=save&tab=prevodtype via the tname parameter...
CVE-2018-8767
joyplus-cms 1.6.0 has XSS in manager/adminajax.php?action=save&tab=prevodtype via the tname parameter...
Piwigo cross-site scripting vulnerability (CNVD-2018-06555)
Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site scripting vulnerability exists in the admin panel in Piwigo version 2.9.3. A remote attacker can exploit th...