File Upload Vulnerability in Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Co.

Ticketmaster ERP Management System is a specialized ticket management system for airline ticketing agents. A file upload vulnerability exists in the Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Company Limited, which can be exploited by an attacker to gain contro...

Command Execution Vulnerability in HulaCWMS

HulaCWMS Hula enterprise website management system is based on ThinkPHP5 framework for the development of enterprise website management system. HulaCWMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the web server...

Command Execution Vulnerability in JTopCMS Backend of Hefei Mingjing Information Technology Co.

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS back-end command execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

Command Execution Vulnerability in Five Fingers CMS Backend

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS backend has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

Command execution vulnerability in Five Fingers CMS backend (CNVD-2021-16339)

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS backend has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

Command Execution Vulnerability in GOCLOUD-ISP1000 and GOCLOUD-ISP2000

Shanghai Guoyun Information Technology Co., Ltd. is a provider of intelligent network products and services. A command execution vulnerability exists in GOCLOUD-ISP1000 and GOCLOUD-ISP2000, which can be exploited by an attacker to gain control of a web server...

Command Execution Vulnerability in Five Fingers CMS (CNVD-2021-16342)

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

LiteSpeed Web Server Enterprise 5.4.11 Command Injection

Exploit Title: LiteSpeed Web Server Enterprise 5.4.11 - Command Injection Authenticated Date: 05/20/2021 Exploit Author: cmOs - SunCSR Vendor Homepage: https://www.litespeedtech.com/ Software Link: https://www.litespeedtech.com/products Version: 5.4.11 Ubuntu/Kali Linux Step 1: Log in to the...

File upload vulnerability exists in ShopXO (CNVD-2021-15972)

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in Fast Reach CMS (CNVD-2021-15975)

Fast Row CMS is open source and free PHP enterprise website production, construction, development and optimization of SEO management system. FPS CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

LiteSpeed Web Server Enterprise 5.4.11 - Command Injection (Authenticated)

Exploit Title: LiteSpeed Web Server Enterprise 5.4.11 - Command Injection Authenticated Date: 05/20/2021 Exploit Author: cmOs - SunCSR Vendor Homepage: https://www.litespeedtech.com/ Software Link: https://www.litespeedtech.com/products Version: 5.4.11 Ubuntu/Kali Linux Step 1: Log in to the...

Command execution vulnerability in Five Fingers CMS backend (CNVD-2021-16338)

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS backend has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Arcvideo Live at Hangzhou Danghong Technology Co.

Arcvideo Live is an encoding and transcoding system based on real-time streaming media. A file upload vulnerability exists in Arcvideo Live of Hangzhou Danghong Technology Co. Ltd. that can be exploited by an attacker to gain control of a web server...

File Upload Vulnerability in ShopXO

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

jetty: buffer not correctly recycled in Gzip Request inflation

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that ...

Security Bulletin: IBM API Connect is impacted by insecure web server configuration (CVE-2020-4825)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4825 DESCRIPTION: IBM API Connect is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionali...

IBM MQ 7.5 / 8.0 / 9.0 < 9.0.0.11 LTS / 9.1 < 9.1.0.7 LTS / 9.2 < 9.2.0.1 LTS / 9.2 < 9.2.1 CD (6408626)

The version of IBM MQ Server running on the remote host is affected by a vulnerability. IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this...

CVE-2021-23271

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting XSS attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX:...

CVE-2021-23271

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting XSS attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX:...

Cross site scripting

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting XSS attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX:...