CVE-2021-23271

The CVE-2021-23271 entry concerns TIBCO EBX Web Server (TIBCO EBX) with a Stored Cross Site Scripting (XSS) vulnerability. Affected are TIBCO EBX versions 5.9.12 and earlier. The issue can be triggered by a low-privileged attacker with network access to execute XSS on the target system. The provi...

CVE-2021-23271 TIBCO EBX Cross Site Scripting (XSS)

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting XSS attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX:...

CVE-2021-23271

The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting XSS attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX:...

Student Record System 4.0 SQL Injection

Exploit Title: Student Record System 4.0 - 'sid' SQL Injection Google Dork: N/A Date: 2/2/2021 Exploit Author: Jannick Tiger Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip Version: V 4.0 Tested on: Windows、XAMPP...

Student Record System 4.0 - 'cid' SQL Injection

Exploit Title: Student Record System 4.0 - 'cid' SQL Injection Date: 2/2/2021 Exploit Author: Jannick Tiger Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip Version: V 4.0 Tested on: Windows、XAMPP Identify the...

The vulnerability in Oracle iPlanet’s web server, related to the read-only access to encryption keys without authentication, allows attackers to disclose protected information.

The vulnerability of Oracle iPlanet web server relates to the read-only access to encryption keys without authentication. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerability of Oracle iPlanet web server, which exists due to the failure to take measures to eliminate special elements, allows attackers to inject images into the administration console.

The vulnerability of Oracle iPlanet web servers exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to inject images into the administration console through the productNameSrc parameter in the URI admingui...

The vulnerability of the Web Server component of the Oracle BI Publisher software, which is used for creating reports, allows a malicious individual to gain unauthorized access to protected information or to read, modify, add, or delete data.

The vulnerability of the Web Server component of the Oracle BI Publisher software for creating reports is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, or to read, modify, add, or delete data...

Tibco Ebx Cross-Site Scripting Vulnerability

Tibco Ebx is a software from Tibco India that supports integration to manage enterprise data assets. A cross-site scripting vulnerability exists in TIBCO EBX Web Server, which originated from a vulnerability that allows a low-privileged attacker with network access privileges to perform a stored...

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

Shenzhen good business network studio Hsycms file upload vulnerability

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Shenzhen Good Business Network Studio Hsycms has a file upload vulnerability that can be exploited by attackers to gain control o...

Command execution vulnerability in songcms backend (CNVD-2021-12674)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...

Command Execution Vulnerability in songcms Backend

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...

CVE-2020-24549

openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server...

Code injection

openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server...

Jenkins < 2.263.2 LTS / 2.275 Multiple Vulnerabilities

The version of Jenkins running on the remote web server is prior to 2.275 or is a version of Jenkins LTS prior to 2.263.2. It is, therefore, affected by multiple vulnerabilities, including the following: - Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure...

Code Execution Vulnerability in the Backend of Ecommerce Power Mall System of Shenzhen Yitongding Multimedia Co.

The business scope of Shenzhen ETD Multimedia Co., Ltd. includes: website construction, mobile WeChat mini-program development, mini-program community group-buying system, VI design, network operation, cloud products-operation and maintenance solutions. There is a code execution vulnerability in...

CVE-2020-24549

openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server...

CVE-2021-2062

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Web Server. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Web Server. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...