WSTMart open source mall system has xss vulnerability

WSTMart open source mall is a system that can help enterprises and individuals to quickly build a community service system. WSTMart open source mall system exists xss vulnerability. Attackers can use this vulnerability to obtain sensitive information such as user cookies...

PHPCMS has an xss vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. An xss vulnerability exists in PHPCMS. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in Le Wai Hot Drama CMS Website Builder System V2.1

Hot Drama CMS Movie & TV Station Building System is a fully automatic video collection website source code developed by PHP+MySQL. Le Wai Hot Drama CMS website builder system system V2.1 exists XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as user...

Multiple vulnerabilities in jspxcms

jspxcms is an open source content management system based on java and jsp technology . jspxcms cross-site request forgery and reflective cross-site scripting vulnerabilities. Attackers can use the vulnerability to send scripts containing malicious links , to be reviewed by the administrator can b...

U.S. Dept Of Defense: █████ - DOM-based XSS

Greetings, I've discovered a DOM-based XSS at ███ Proof of concept: 1. Go to https://████/█████████/home/troubleshoot.html?lang=en 2. In the username field, add the following code: --button/autofocus/onfocus=Function"confirm1";//name="XSS 3. The javascript code is correctly executed: ██████ Impac...

Ranzhi Synergy is vulnerable to XSS

Ranch Collaboration System is an open source collaborative office system for small and medium-sized businesses. Ranzhi Synergy has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

Shopify: Subdomain Takeover - https://competition.shopify.com/

Dear Shopify Security Team, The Shopify.com subdomain competition.shopify.com was vulnerable to a subdomain takeover as it was pointing to an unclaimed Heroku service through the CNAME competition.shopify.com.herokudns.com, while the custom domain 'competition.shopify.com' was unclaimed in Heroku...

Stored Cross-Site Scripting Vulnerability at Order Invoice in Cloud EC E-commerce System

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system order invoice at the existence of stored cross-site scripting vulnerabilities. An...

Catfish CMS suffers from cross-site scripting vulnerability

Catfish Catfish CMS is an open source PHP content management system. A cross-site scripting vulnerability exists in Catfish CMS. An attacker can exploit this vulnerability to obtain cookie information about other users and administrators...

SQL Injection and Cross-Site Scripting Vulnerabilities in Esmay's Non-Book Resource Management System

Esmay Non-Book Resource Management System can help librarians conveniently manage accompanying books, accompanying CD-ROMs and other non-paper resources, and help patrons directly search, browse online, operate online, partially download, and fully download the CD-ROMs they need. There are SQL...

XSS Vulnerability in Oceanis Cloud Browser

Oceanis Cloud Browser is a cross-platform cloud service browser with a dual-core engine developed by Maxthon. An XSS vulnerability exists in Oceanis Cloud Browser, which can be exploited by attackers to implant cross-site code and obtain sensitive information such as user cookies...

zzcms8. 1 a stored xss+csrf can steal all the user cookies

No description provided by source...

XSS Vulnerability in mlecms V2.3

mlecms is a multi-language, free and open source content management system. An XSS vulnerability exists in mlecms V2.3. An attacker can exploit this vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in X6CMS

X6CMS, the full name of Xiaoliu Website Content Management System. X6CMS is a fully functional marketing website management platform with PHP+MYSQL architecture. X6CMS has XSS vulnerability. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

Joomla com_akobook component cross-site scripting vulnerability

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL. A cross-site scripting vulnerability exists in the Joomla comakobook component. It allows attackers to construct XSS statements, perform pop-up box operations, and obtain information such as user...

XSS Vulnerability in WeiPHP, an Open Source WeChat Public Platform Development Framework

WeiPHP is an easy to build, scalable open source WeChat public platform development framework, you can easily build a belong to their own WeChat public account operation platform. Open source WeChat public platform development framework WeiPHP index.php in the root directory exists an xss...

DedeCMS stored xss vulnerability

Vulnerability description: Dedecms is an open source PHP open source website management system. Dedecms member function shopsdelivery. in php des parameters there is stored XSS vulnerability, the attacker may exploit the vulnerability to obtain the users cookie. Test environment: DedeCMS-V5...

IBM Kenexa LMS on Cloud Cross-Site Scripting Vulnerability

IBM Kenexa LMS on Cloud is a configurable, enterprise-grade social learning management system LMS developed by IBM that integrates social networking, collaboration, and knowledge sharing capabilities. The system provides interactive features and supports users to evaluate learning content and sha...

21CN Email Client - Micro Mail IOS Version XSS Vulnerability

Micro Mail is a multi-mailbox management mobile client, mobile office tools for personal and business users. XSS vulnerability exists in the IOS version of 21CN Email Client - MicroMail, which allows attackers to insert malicious js code into the page to obtain user cookies and other information,...

New Relic: Session Management Flaw

Hi, Sir I found a Vulnuberlity in your Website. Called Session Management Flaw You can Know More About This Flaw through OWASP Guide https://www.owasp.org/index.php?title=BrokenAuthenticationandSessionManagement&setlang=en in this Loop Hole The Application Is Not Destroying the Session After...