CVE-2019-16657

TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...

CVE-2019-16657

TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...

CVE-2019-16655

joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...

Code injection

TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...

Authentication flaw

joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...

CVE-2019-16655

joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...

CVE-2019-16657

TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...

PT-2019-14742

Name of the Vulnerable Software and Affected Versions TuziCMS version 2.0.6 Description The issue concerns an XSS vulnerability that can be triggered via the PATH INFO to a group URI. This is demonstrated by accessing index.php/article/group/id/2/, which allows for potential malicious script...

CVE-2019-16657: Improper Neutralization of Input During Web Page Generation

TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...

PT-2019-14740

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue allows for reinstallation if the install/ URI remains available. Recommendations For joyplus-cms version 1.6.0, restrict access to the install/ URI to prevent reinstallation...

CVE-2019-16655: Undefined Security Weakness

joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...

KLA11741 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Policy enforcement...

Mail.ru: Stored XSS on go.mail.ru

Page URI in search results output on go.mail.ru was not properly sanitized...

CVE-2019-16310

NIUSHOP V1.11 has XSS via the index.php?s=/admin URI...

CVE-2019-16310

NIUSHOP V1.11 has XSS via the index.php?s=/admin URI...

CVE-2019-16310

NIUSHOP V1.11 has XSS via the index.php?s=/admin URI...

CVE-2019-16310

CVE-2019-16310 affects NIUSHOP V1.11 with an XSS vulnerability via the index.php?s=/admin URI. The connected records do not provide payloads, affected sub-versions beyond V1.11, remediation steps, or explicit exploit details. CVSS metrics are provided (NVD CVSSv2 base 3.5, CVSSv3.1 base 5.4). Act...

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0171)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some of these bugs showed evidence...

PT-2019-5094

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient filtering in URI schemes, allowing a remote attacker to bypass navigation restrictions. This could potentially lead to unauthorized access to...

Code injection

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...