CVE-2018-10220

Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter. NOTE: the vendor indicates that this is intentional behavior because the product is a web application honeypot, and modules/handlers/emulators/rfi.py supports Remote File Inclusion emulation...

SQL Injection Vulnerability in 'tablename_abc' Parameter of Xinhoo Collaboration Office System

Xinhuo coworking system is an open source office system, cross-platform system, support APP, pc web version, pc client and so on. SQL injection vulnerability exists in the 'tablenameabc' parameter of Xinhao Co-op Office System. Allow attackers to exploit the vulnerability to obtain sensitive...

Sql injection

SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands via the abc parameter...