WonderCMS 2.1.0 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications document.forms0.submit; !-- Disclosure Timeline: --------------------- 2017-06-16: Vulnerability found. 2017-06-17: Reported to vendor. 2017-06-17: Vendor responded and send a new version for test in it. 2017-06-17: Test new version and...

Guilin DaCong Network Technology website builder system aid parameter SQL injection vulnerability

Guilin DaCong Network Technology website building system is a website building system with Guilin website construction and Guilin website promotion as the core business. SQL injection vulnerability exists in the parameters of Guilin DaCong Network Technology website building system aid, which can...

SQL Injection Vulnerability in Name Parameter of c9cms High-end Website Building System

C9CMS makes a free and open source enterprise building system. A SQL injection vulnerability exists in the name parameter of c9cms high-end website builder system. Attackers can use this vulnerability to obtain sensitive information in the database...

CSRF vulnerability exists in Aisooki enterprise website builder system V2.1

Aisok universal enterprise building system cicms is based on PHP + Mysql development of an enterprise website management system. CSRF vulnerability exists in Aisooker General Enterprise Website Builder System V2.1. An attacker can exploit this vulnerability to forge form links and trick...

SQL Injection Vulnerability in the ID Parameters of the Website Building System of Tianjin General Zhuoye Technology Co.

Tianjin General Zhuoye Technology Co., Ltd. station-building system is a station-building system that provides Tianjin website construction, Tianjin website promotion, network marketing integration services, website security solutions. There is a SQL injection vulnerability in the ID parameter of...

Liyang Jinlong Network Service Co., Ltd. website building system has XSS, ultra vires access vulnerabilities

Ltd. is a brand network company integrating creativity, planning, service and sales. There are XSS and transgression access vulnerabilities in the website building system of Liyang Golden Dragon Network Service Co. Attackers can use this vulnerability to insert XSS cross-site code in the message...

Storage-based Cross-site Scripting Vulnerability in Aisook General Enterprise Website Builder System

Aisok universal enterprise building system cicms is based on PHP + Mysql development of an enterprise website management system. A storage-based cross-site scripting vulnerability exists in the Aisook General Enterprise Website Builder System. The vulnerability is caused by the message function...

S-CMS enterprise website builder system/wapmember/post.asp page O_id parameter exists SQL injection vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is a SQL injection vulnerability in the Oid parameter of the /wapmember/post.asp page of the S-CMS enterprise website builder system. As the program fails to filter the data submitted by users, it...

SQL Injection Vulnerability in Topic Parameter of Zaoyang City Shanshui Digital Studio's Website Building System

Zaoyang Shanshui Digital Studio website building system is a website building system. A SQL injection vulnerability exists in the topic parameter of the Zaoyang City Landscape Digital Studio website builder system. Allow attackers to exploit the vulnerability to obtain sensitive information from...

Multiple SQL Injection Vulnerabilities in Zaoyang City Shanshui Digital Website Building System

Zaoyang Shanshui digital website builder system is a website builder system. SQL injection vulnerability exists in the index.php and subject.php pages of the Zaoyang City Shanshui Digital website builder system, as the program fails to filter user-submitted data, allowing attackers to exploit the...

SQL Injection and Reflective Cross-site Scripting Vulnerabilities in Topps Enterprise Website Builder System

Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services for enterprises in Suzhou and the surrounding areas. Topps enterprise website builder system suffers from SQL injection and reflective cross-site scripting vulnerabilities. Due to the...

SQL Injection Vulnerability in Zaoyang City Shanshui Digital Website Building System

Zaoyang City Landscape Digital Studio is a company that integrates website construction, software development, network marketing, graphic design, website operation, enterprise post office, space domain name service and film and television filming services. A SQL injection vulnerability exists in...

Visual Link Sharing Websites Builder Script 2.1.0 - SQL Injection

Visual Link Sharing Websites Builder Script 2.1.0 - SQL Injection Exploit Title: Flippy LinkShare – Visual Link Sharing Websites Builder Script v2.1.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

My Private Tutor Website Builder Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: My Private Tutor Website Builder Script Script Buy Now:...

My Private Tutor Website Builder Script - SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: My Private Tutor Website Builder Script Script Buy Now: http://www.popularclones.com/products/My-Private-Tutor-Website-Builder Author: Ihsan Sencan Author Web:...

Cross-site scripting vulnerability in 'index.php' page of DM website builder system

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. A cross-site scripting vulnerability exists in the 'index.php' page of the DM website builder system. The program fails to filter...

Stored Cross-site Scripting Vulnerability in s-cms Website Builder System

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. A stored cross-site scripting vulnerability exists in the S-CMS website builder system. Due to the lack of filtering on the /member/memberreg.asp page, an attacker can launch a...

Cross-site scripting vulnerability in the 'adminfrom.php' page of the DM website builder system

DM enterprise building system is developed by php + mysql for small and medium-sized enterprise website construction of a set of open source cms. A cross-site scripting vulnerability exists in the 'adminfrom.php' page of the DM website builder system. The program fails to filter user-supplied...

SQL Injection Vulnerability in Taiwan Yicheng Web Design Company's Website Building System

Yee Seng Technology website building system is a content management system template developed by Yee Seng Technology in Taiwan. A SQL injection vulnerability exists in the num parameter in the show.php page of the ArtShing Technology website builder system, which can be exploited by attackers to...

File Containment Vulnerability in Minyou Website Builder System

Minyou web site building system is developed by java content management system is mostly used in government, school management system. The product's download.jsp page pathfile parameter exists arbitrary file download vulnerability, poc for: http://host/download.jsp?pathfile=/... /... /... /... /...