CVE-2019-19094

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

Sql injection

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

CVE-2019-19094 ABB eSOMS: SQL injection vulnerability

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

Command Execution Vulnerability in YKCMS v5 Backend Rule Management System

YKCMS5 is a film and television system specifically tailored for film and television collection. YKCMS v5 backend rules management system has a command execution vulnerability that can be exploited by attackers to obtain web server administrator privileges...

CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

Denial Of Service (DoS)

nbdkit is vulnerable to denial of service. The vulnerability exists due to the premature opening of back-end connection...

Apache -- Multiple vulnerabilities

Apache Team reports: SECURITY: CVE-2020-1934 modproxyftp: Use of uninitialized value with malicious backend FTP server. SECURITY: CVE-2020-1927 rewrite, core: Set PCREDOTALL flag by default to avoid unpredictable matches and substitutions with encoded line break characters. The fix for...

SQL Injection Vulnerability in the backend of Phaidron cms

Phoenitron CMS is a set of rapid website building program developed by Phoenitron Network, which is suitable for small and medium-sized enterprises and individuals to build their own websites quickly. SQL injection vulnerability exists in the backend of Phaidron CMS, which can be exploited by...

SQL Injection Vulnerability in Baishuo Networks CMS Admin Backend Login

Baishuo web cms management system is a content management system for text processing, image processing, flash animation, sound and video streaming, images and even email archives. A SQL injection vulnerability exists in the backend login of Bystronic's cms management system, which can be exploite...

Code Execution Vulnerability in the Backend of Phaidron CMS

Phoenitron CMS is a set of rapid website building program developed by Phoenitron Network, which is suitable for small and medium-sized enterprises and individuals to build their own websites quickly. Code execution vulnerability exists in the background of Phaidron CMS, which can be exploited by...

Xionghai CMS v1.0 SQL Injection Vulnerability in Background

XIONGHAI CMS is a comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS v1.0 there is a SQL injection vulnerability in the background, attackers can use the vulnerability to obtain sensitive information in the...

evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

Inspection management system web version has a universal password login vulnerability

Inspection management system is a service installed in the cloud platform, realizing multi-platform PC backstage management, APP instant view, patrol stick patrol, multi-department, multi-level, cross-region management of the patrol inspection system. There is a universal password login...

Project iKy v2.4.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface

Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...

SQL Injection Vulnerability in Heybbs Backend ms***_de***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background msde.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs Backend ad***_ad***_no***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background adadno.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs Backend ad**.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background ad.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs Backend ms***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background ms.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

QCMS is vulnerable to XSS

QCMS website management system is a PHP lightweight system developed through MVC architecture. An XSS vulnerability exists in the QCMS backend, which can be exploited by attackers to obtain user login credentials...

SQL Injection Vulnerability in Heybbs Backend no***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background no.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...