xss vulnerability in free version of s-cms hospital website builder system

S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. There is a cross-site scripting vulnerability in S-CMS hospital website builder system. An attacker can insert malicious js code into the page to obtain user cookies and...

Cross-site Scripting Vulnerability in Positive Faculty System

Ltd. is a software enterprise and high-tech enterprise specializing in consulting, planning, construction and service in the field of university education informatization. Cross-site scripting vulnerability exists in the Zhengfang Academic Affairs System. An attacker can insert malicious js code...

Monxin Netcom mall system distribution small store settings storefront at the existence of storage-type cross-site scripting vulnerability

Monxin Allnet Mall System is a mall system with PC mall, mobile mall, micro letter mall and offline cashier system created by Monxin Technology. A stored cross-site scripting vulnerability exists in the Monxin mall system at the distribution store settings storefront. Attackers can insert malicio...

XSS vulnerability in 74cms

74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms has an XSS vulnerability that allows an attacker to insert malicious js code into a page to obtain user cookies and other information, resulting in user hijacking...

Qibo B2B E-commerce System Stored Cross-site Scripting Vulnerability

Qibo B2B e-commerce system is based on PHP programs and Mysql database-based open source B2B industry portal e-commerce website builder . Qibo B2B e-commerce system stored cross-site scripting vulnerabilities. Attackers can insert malicious js code in the page to obtain user cookies and other...

Stored Cross-Site Scripting Vulnerability in PHPMyWind v5.5 Backend

HPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A stored cross-site scripting vulnerability exists in the backend of PHPMyWind v5.5. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user...

Stored Cross-site Scripting Vulnerabilities in Qingdao Easoft Tianchuang Ranzhi Collaboration Management System (QDTMS)

Ranch Coworking Management System is an enterprise coworking system. A stored cross-site scripting vulnerability exists in several places in Ranzhi Collaboration Management System. Attackers can insert malicious js code in the page to get user cookies and other information, resulting in user...

Stored Cross-Site Scripting Vulnerability in Safetrans SaaS System

The SaaS system is an informatization system developed by Xiaobei Technology for medium and large-scale sports events and outdoor activities, providing one-stop informatization solutions for organizers in the areas of event release, registration and collection, membership marketing, photo sharing...

Stored Cross-Site Scripting Vulnerability in CLTPHP's "Membership Management in the Backend of the Website".

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. A stored cross-site scripting vulnerability exists in the "Membership Management" section of CLTPHP. An attacker can insert malicious js code into the page to obtain user cookies and other...

Hefei Zhengjie Information Consulting Co., Ltd. hotel station building system suffers from cross-site scripting vulnerabilities

Hefei Zhengjie Information Consulting Co., Ltd. is mainly engaged in business travel services such as hotel booking, air ticket booking and visa abroad. A cross-site scripting vulnerability exists in the hotel builder system of Hefei Zhengjie Information Consulting Co. An attacker can insert...

Cross-Site Scripting Vulnerability in EasySNS V1.6 Frontend

ESPHP development framework based on the development of EasySNS minimalist community for the new database architecture and program structure.ESPHP is a self-developed set of PHP source code framework. EasySNS V1.6 in the program implementation of cross-site scripting vulnerabilities, attackers ca...

Stored Cross-Site Scripting Vulnerability at jeecms Published Articles

JEECMS is a content management system developed by Jiangxi Jinlei Technology Development Co., Ltd. that supports WeChat applet, WeChat public number/service number, column model, cross-customization of content model, as well as with payment and financial settlement. A stored cross-site scripting...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting XSS attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs:...

Catfish CMS controller/Common.php page has a stored cross-site scripting vulnerability

Catfish catfish CMS is open source PHP content management system. A cross-site scripting vulnerability exists in the Catfish CMS controller/Common.php page. An attacker can insert malicious js code to obtain user cookies and other information, resulting in user hijacking...

Stored Cross-site Scripting Vulnerability in the Sunshine Letters and Visits Comprehensive Service Management System of Jiangsu Chuhuai Science and Technology Development Co.

Sunshine Petition Comprehensive Service Management System is a petition information system launched by Jiangsu Chuhuaike Software Technology Development Co. A stored cross-site scripting vulnerability exists in the Sunshine Petition Comprehensive Service Management System of Jiangsu Chuhuaike...

Bumper to bumper shopping app has a logic design flaw

Bumper to Bumper App is an online shopping application. There is a logic design vulnerability in BumperBuy APP. Attackers can register any account, reset any password, insert malicious js code in the personal information page, obtain user cookies and other information through packet bursting...

Stored Cross-Site Scripting Vulnerability in Mythical Doctor App

The Mythical Doctor app is a leading doctor-patient type tool in the field of mobile health, dedicated to helping you build an online communication service between you and your doctor, and providing you with medicines to your home. A stored cross-site scripting vulnerability exists in the...

Stored Cross-Site Scripting Vulnerability in Hulu 3 Floor App

Hulu Man 3F APP is a player exchange community platform launched by Guangzhou Manju Network Technology Co. A stored cross-site scripting vulnerability exists in the "Feedback" section of Hulu Man 3F APP. An attacker can insert malicious js code into the page to obtain user cookies and other...

XSS Vulnerability in Emlog Blog System

emlog 5.3.1 is a PHP and MySQL based blog and CMS builder. An XSS vulnerability exists in the Emlog blog system. It allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

Stored XSS Vulnerability in EYU Academic Worker Integration Platform

The EYU Academic and Labor Integration Platform is a college and university information content management system. The EYSIP has a stored XSS vulnerability that can be exploited by an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user...