Arbitrary File Read Vulnerability in the Background of Feifei Movie Navigation System

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. An arbitrary file read vulnerability exists in the background of Feifei Movie & TV Navigation System, which can be exploited by attackers to compromise confidentiality...

SQL Injection Vulnerability in ZZCMS Backend zt***_se***.php File

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ztse.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Deletion Vulnerability in the Backend of Feifei Movie Navigation System (CNVD-2020-25318)

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. Feifei Movie and TV navigation system background there are arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any file server...

File Upload Vulnerability in Extreme CMS Backend

Extreme CMS is open source and free PHPCMS web content management system. There is a file upload vulnerability in the backend of Extreme CMS, which can be exploited by attackers to upload malicious files and gain administrative privileges on the server...

CVE-2019-19094

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

Sql injection

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

CVE-2019-19094 ABB eSOMS: SQL injection vulnerability

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

Command Execution Vulnerability in YKCMS v5 Backend Rule Management System

YKCMS5 is a film and television system specifically tailored for film and television collection. YKCMS v5 backend rules management system has a command execution vulnerability that can be exploited by attackers to obtain web server administrator privileges...

CVE-2019-19094: Improper Neutralization of Special Elements used in an SQL Command

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

Denial Of Service (DoS)

nbdkit is vulnerable to denial of service. The vulnerability exists due to the premature opening of back-end connection...

Apache -- Multiple vulnerabilities

Apache Team reports: SECURITY: CVE-2020-1934 modproxyftp: Use of uninitialized value with malicious backend FTP server. SECURITY: CVE-2020-1927 rewrite, core: Set PCREDOTALL flag by default to avoid unpredictable matches and substitutions with encoded line break characters. The fix for...

SQL Injection Vulnerability in the backend of Phaidron cms

Phoenitron CMS is a set of rapid website building program developed by Phoenitron Network, which is suitable for small and medium-sized enterprises and individuals to build their own websites quickly. SQL injection vulnerability exists in the backend of Phaidron CMS, which can be exploited by...

Code Execution Vulnerability in the Backend of Phaidron CMS

Phoenitron CMS is a set of rapid website building program developed by Phoenitron Network, which is suitable for small and medium-sized enterprises and individuals to build their own websites quickly. Code execution vulnerability exists in the background of Phaidron CMS, which can be exploited by...

Xionghai CMS v1.0 SQL Injection Vulnerability in Background

XIONGHAI CMS is a comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS v1.0 there is a SQL injection vulnerability in the background, attackers can use the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in Baishuo Networks CMS Admin Backend Login

Baishuo web cms management system is a content management system for text processing, image processing, flash animation, sound and video streaming, images and even email archives. A SQL injection vulnerability exists in the backend login of Bystronic's cms management system, which can be exploite...

evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

Inspection management system web version has a universal password login vulnerability

Inspection management system is a service installed in the cloud platform, realizing multi-platform PC backstage management, APP instant view, patrol stick patrol, multi-department, multi-level, cross-region management of the patrol inspection system. There is a universal password login...

Project iKy v2.4.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface

Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...

SQL Injection Vulnerability in Heybbs Backend ms***_de***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background msde.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...