4235 matches found
CVE-2016-6800
The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate blogs which are related to specific parties. In the form field for the creation of new blog articles the user input of the summary field as well as the article field is not...
PT-2017-9017
Name of the Vulnerable Software and Affected Versions Apache OFBiz versions prior to 16.11.01 Description The Apache OFBiz framework has a blog functionality that allows different users to operate blogs related to specific parties. The form fields for creating new blog articles do not properly...
CVE-2016-6800: Improper Neutralization of Input During Web Page Generation
The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate blogs which are related to specific parties. In the form field for the creation of new blog articles the user input of the summary field as well as the article field is not...
TUTUCMS system admin\Article.php page order parameter has SQL injection vulnerability
TUTUCMS is a set of CMS management program focusing on the development of image-based websites, using PHP+MYSQL architecture, which can run on different platforms Windows, Linux, Unix. A SQL injection vulnerability exists in the order parameter of the admin\Article.php page of the TUTUCMS system...
Citrix Workspace App for Mac and Linux fail to Redirect Local printer to Citrix Sessions
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Client printers on Mac and Linux clients fail to be created in XenApp and XenDesktop sessions runnin...
2017-08 Security Update for Adobe Flash Player for Windows Embedded 8 Standard for x86-based Systems (KB4034662)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2017-08 Security Update for Adobe Flash Player for Windows 10 Version 1607 for x86-based Systems (KB4034662)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2017-08 Security Update for Adobe Flash Player for Windows 10 Version 1607 for x64-based Systems (KB4034662)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2017-08 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4034668)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2017-08 Security Update for Adobe Flash Player for Windows 10 Version 1511 for x64-based Systems (KB4034662)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Cross site scripting
XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title...
CVE-2017-12647
XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title...
CVE-2017-12647
XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title...
[20170901] - Core - Information Disclosure
A logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...
Niushop open source mall system has multiple SQL injection vulnerabilities
NiuShop open source mall system , is by the Shanxi Niu Cool Information Technology Co., Ltd. completely independent design , research and development of a PHP open source e-commerce system . NiuShop open source mall system collectionGoodsOrShopt, cancelCollGoodsOrShop, platformAdvList,...
CVE-2017-11413
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/controller/commentstatus.php via $GET'id'...
CVE-2017-11419
Fiyo CMS 2.0.7 has SQL injection in /apps/apparticle/controller/editor.php via $POST'id' and $POST'arttitle'...
CVE-2017-11415
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/sysarticle.php via $POST'parentid', $POST'desc', $POST'keys', and $POST'level'...