4738 matches found
Web Security Dog (Apache Edition) V4.0 suffers from SQL Injection Bypass Vulnerability
Website Security Dog is a server tool that integrates website content security protection, website resource protection and website traffic protection functions. Functions covered by the net horse / Trojan scanning, anti-SQL injection, anti-stolen links, anti-CC attacks, real-time website traffic...
SilverStripe Cross-Site Request Forgery Vulnerability (CNVD-2020-10710)
SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A cross-site request forgery vulnerability exists in SilverStripe 4.3.3 and earlier...
Unspecified Vulnerability in Codologic Codoforum
Codoforum is a set of PHP and MySQL based forum software. A security vulnerability exists in Codologic Codoforum version 4.8.4. An attacker can exploit this vulnerability to steal authentication cookies and take control of an account...
DEBIAN-CVE-2020-7238
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace such as a spaceTransfer-Encoding:chunked line and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869...
CVE-2020-6964
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X and CARESCAPE Central Station CSCS Versions 2.X, the integrated service for keyboard switching of the...
PYSEC-2020-85
An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...
PT-2020-18294 · Phpgurukul · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System in PHP version 4.0 Description: The issue concerns multiple reflected XSS vulnerabilities. These can be triggered via the searchdata or Doctorspecialization parameter. Recommendations: For PHPGurukul...
PT-2020-10183 · Symantec · Symantec Endpoint Detection/Response
Name of the Vulnerable Software and Affected Versions: Symantec Endpoint Detection and Response SEDR versions prior to 4.3.0 Description: The issue is related to a cross site scripting XSS problem, which can allow attackers to inject client-side scripts into web pages viewed by other users. This...
CODOFORUM Cross-Site Scripting Vulnerability
Codoforum is a free forum package built with PHP and MySQL. A cross-site scripting vulnerability exists in the administration dashboard in Codoforum 4.8.3. The vulnerability can be exploited to conduct a cross-site scripting attack via the Categories in the Manage Users screen...
PHP Scripts Mall advanced-real-estate-script cross-site scripting vulnerability
PHP Scripts Mall advanced-real-estate-script is a real estate website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the 'searchtext' parameter of the search-results.php file in PHP Scripts Mall advanced-real-estate-script version 4.0.9. The vulnerability...
PT-2020-18293 · Phpgurukul · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities arise because multiple pages and parameters within the application do not properly validate user...
Command Execution Vulnerability in Xunrui CMS V4.3.4 at Sichuan Xunrui Cloud Software Development Co.
Xunrui CMS free open source system is based on PHP7 language using the latest CodeIgniter4 as the development framework for the production of web content management framework. Sichuan Xunrui Cloud Software Development Co., Ltd. Xunrui CMS V4.3.4 there is a command execution vulnerability, attacke...
PT-2020-18292 · Phpgurukul · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System in PHP version 4.0 Description: The issue concerns multiple Persistent XSS vulnerabilities. Recommendations: For version 4.0, update to a newer version that contains a fix for this issue, if available. At...
CVE-2020-5305
Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen...
PT-2020-18395 · Codoforum · Codoforum
Name of the Vulnerable Software and Affected Versions: Codoforum version 4.8.3 Description: The issue allows for XSS attacks through posts using parameters such as display name, title name, or content. Recommendations: For Codoforum version 4.8.3, update to a newer version that contains a fix for...
shadow lifting vulnerability
shadow is a suite of tools for maintaining Debian systems. A security vulnerability exists in shadow version 4.8. An attacker has exploited this vulnerability to gain root privileges...
Xiuno BBS code issue vulnerability
Xiuno BBS is an open source forum program based on PHP and MySQL. A code issue vulnerability exists in Xiuno BBS version 4.0. The vulnerability stems from an improperly designed or implemented problem in the code development process of a web system or product. No detailed vulnerability details ar...
PT-2019-14725 · Jenkins · Jenkins Rapiddeploy Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins RapidDeploy Plugin version 4.1 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified web server. Recommendations: For Jenkins RapidDeploy Plugin version 4.1 and earlier, updat...
PT-2019-14726 · Jenkins · Jenkins Rapiddeploy Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins RapidDeploy Plugin versions 4.1 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified web server. Recommendations: For Jenkins RapidDeploy...