105 matches found
PT-2024-28896 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is caused by the admin config mark.php file directly splicing and writing user input data into inc photowatermark config.php without processing it. This allows authenticated attackers to execute...
SeaCMS 安全漏洞
SeaCMS is an open source content management system based on PHP+MySql technology. An input validation vulnerability exists in the SeaCMS adminconfigmark.php processing parameter, which can be exploited by a validated remote attacker to submit a special request and execute arbitrary commands in th...
The vulnerability of the /admin/config_Anticrack.php file of the application security gateway, owned by NS-ASG Netentsec, allows a hacker to execute arbitrary SQL queries.
The vulnerability of the /admin/configAnticrack.php file of the application security gateway, NS-ASG Netentsec, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the GroupId...
CVE-2024-3456
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/configAnticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack may be launched...
PT-2024-25985 · Netentsec · Netentsec Ns-Asg Application Security Gateway
Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3 Description: A critical vulnerability has been found in the Netentsec NS-ASG Application Security Gateway. This issue affects an unknown part of the file /admin/config...
Netentsec NS-ASG Application Security Gateway SQL注入漏洞
NetentSec NS-ASG Application Security Gateway is an application security gateway from China NetentSec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from a SQL injection vulnerability in the parameter GroupId in the file...
Netentsec NS-ASG Application Security Gateway SQL注入漏洞
NetentSec NS-ASG Application Security Gateway is an application security gateway from China NetentSec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from a SQL injection vulnerability in the parameter GroupId in the file...
PT-2024-23636 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...
CVE-2024-30864
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...
Cogites eReserv Cross-Site Scripting Vulnerability
Cogites eReserv is an online reservation management software from Cogites. A cross-site scripting vulnerability exists in Cogites eReserv version 7.7.58, which stems from a cross-site scripting vulnerability in the /front/admin/config.php file...
PT-2024-16140 · Cogites · Cogites Ereserv
Name of the Vulnerable Software and Affected Versions: Cogites eReserv version 7.7.58 Description: A cross-site scripting issue affects the processing of the file front/admin/config.php. The manipulation of the id argument with a specific input leads to cross-site scripting. This issue can be...
PT-2023-17455 · Unknown · Campcodes Advanced Online Voting System
Name of the Vulnerable Software and Affected Versions: Campcodes Advanced Online Voting System version 1.0 Description: A vulnerability has been found in the system, classified as problematic. It affects unknown code of the file /admin/config save.php. The manipulation of the title argument leads...
Campcodes Advanced Online Voting System 跨站脚本漏洞
Campcodes Advanced Online Voting System is an online voting system. A cross-site scripting vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter title of the file...
Upgraded Q -> M from 270 [1657580410834]
Judge has assessed an item in Issue 270 as Medium risk. The relevant finding follows: 6.L- Admin config ProtocolFee and gasFee missing max amount check which can be used to take fund from user With PROTOCOLFEEBPS 10000 more than 100%, the exchange can steal user WETH who might approve max WETH...
CVE-2021-42946
A Cross Site Scripting XSS vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page...
CVE-2021-42946
A Cross Site Scripting XSS vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page...
HTMLy 跨站脚本漏洞
HTMLy is a PHP-based open source blogging platform. A security vulnerability exists in HTMLy 2.8.1 that could lead to cross-site scripting via the copyright field in the /admin/config page...
