YzmCMS WeChat Module Reflective Cross-Site Scripting Vulnerability

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture. A reflective cross-site scripting vulnerability exists in the YzmCMS WeChat module. Attackers can exploit this vulnerability through the admin/module/init.html echostr parameter to conduct cross-site...

Design/Logic Flaw

The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php...

CVE-2018-10026

The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php...

CVE-2018-10026

The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php...

CVE-2018-10026

The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php...

CVE-2018-10026

The CVE describes a reflected cross-site scripting vulnerability in YzmCMS 3.7.1 within the WeChat module. The issue occurs when processing the admin/module/init.html echostr parameter, tied to the valid function in application/wechat/controller/index.class.php. This allows XSS via user-controlle...

Sichuan Jiayuan Electronic Technology Co., Ltd. has an overstepping access vulnerability in the Medjia Cloud

The MediKarma Cloud Platform is a forward-looking medical model solution under the "Internet+Medicine" model. Sichuan Jiayuan Electronic Technology Co., Ltd. medical good cloud WeChat registration platform there is an overstepping access vulnerability, the attacker can use the vulnerability to...

SQL Injection Vulnerability in the delProgram Method of the ChaseGrid WeChat Small Program App Store System

Chasing the grid WeChat small program application store system is a free open source small program store system developed by Chasing the grid technology. The delProgram method of the ChaseGrid WeChat applet store system suffers from a SQL injection vulnerability. Attackers can use the vulnerabili...

SQL Injection Vulnerability in the addProgram Method of ChaseGrid's WeChat Small Program App Store System

Chasing the grid WeChat small program application store system is a free open source small program store system developed by Chasing the grid technology. The addProgram method of the ChaseGrid WeChat applet store system has a SQL injection vulnerability. Attackers can use the vulnerability to...

Facebook Covertly Launches A Photo-Sharing App In China

The Chinese market is no doubt a pot of gold for big technology giants with over 700 million internet users, but the Chinese government heavily controls the Internet within its borders through its Golden Shield project – the Great Firewall of China. The Great Firewall has blocked some 171 out of...

Micro OA365 WeChat Office System suffers from an override access vulnerability

Micro OA365 is an excellent free microsoft office platform software. Micro OA365 WeChat Office System suffers from an override access vulnerability. An attacker can exploit the vulnerability to jump to other arbitrary pages...

Code Execution Vulnerability in Micro OA365 WeChat Office System

Micro OA365 is a simple, easy to use, free, microsoft mobile office software. A code execution vulnerability exists in Micro OA365 WeChat Office. An attacker can exploit the vulnerability to gain control of the web server...

File Upload Vulnerability in Micro OA365 WeChat Office System

Micro OA365 is a simple, easy to use, free, microsoft mobile office software. A file upload vulnerability exists in Micro OA365 WeChat Office System. An attacker can exploit the vulnerability to upload arbitrary files and gain control of the web server...

Discuz plug-in Bluegrass today wechat voting rights limit and brush votes vulnerability with python scripting-vulnerability warning-the black bar safety net

Two days before the bunch of friends online canvassing, feeling that something in the programmer before it is an irony（me is the programmer before me, when a programmer there are always people that you will be stolen QQ, attack, repair the computer。。。。） Directly into the theme, with to Tools: 1...

XSS Vulnerability in WeiPHP, an Open Source WeChat Public Platform Development Framework

WeiPHP is an easy to build, scalable open source WeChat public platform development framework, you can easily build a belong to their own WeChat public account operation platform. Open source WeChat public platform development framework WeiPHP index.php in the root directory exists an xss...

Wechat appeared“remote pop exploit”has been maxed circle of friends in reference to specific play-a vulnerability warning-the black bar safety net

This morning a 5 month 26 day, micro-channel circle of friends have a lot of friends to the lei Feng network reflect: wechat appearedXSSvulnerabilities that can be in a friends phone, remote pop up! The black bar safety net in accordance with the User Instructions, go to wechat search friends...

WeChat - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application WeChat published at the 'play' market has multiple vulnerabilities...

SQL injection vulnerability in phpwechat wechatmanage.class.php

phpwechat is a simple framework for building a PC website + wechat public platform. phpwechat wechatmanage.class.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information using commonly used SQL injection tools...

wechat.migu.cn XSS vulnerability

Vulnerable URL: http://wechat.migu.cn/weixin/music/playerorderSongService.jsp?jsoncallback=prompt/OPENBUGBOUNTY/...

QrlJacker - QrlJacking Exploitation Framework

A python framework which goal is to exploit QrlJacking attack vector easily Installation Requirements Python 2.7.x Requests Pillow Selenium configparser Installation on Windows After downloading the framework cd QrlJacking-Framework pip install -r requirements.txt python QRLJacker.py Installation...