Logic Flaw Vulnerability in Acme CMS

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Acme CMS has a logic flaw vulnerability that can be exploited by attackers to forge an administrator cookie to log into the backend...

Easy WP SMTP v1. 3. 9）0 day vulnerability is being attacked in the process and reproducibility-vulnerability warning-the black bar safety net

Foreword Your own blog site with wordpres hosting, last month found some abnormalities. 3.12 days, the mailbox explosion, received more than 100 letter on the site is the blasting of the notification mail. ! Day to see also not strange, because before it appeared such a situation, every day there...

Imperial cms background exists arbitrary file deletion vulnerability

Empire CMS is a content management system CMS. An arbitrary file deletion vulnerability exists in the backend of Empire cms, which can be exploited by an attacker to delete arbitrary files...

Arbitrary File Deletion Vulnerability in CatfishCMS Backend

CatfishCMS is open source and free PHP CMS web content management system. A file arbitrary deletion vulnerability exists in the CatfishCMS backend. Attackers can use the vulnerability to obtain server privileges...

Logic flaw vulnerability in cms system of Wave Group Ltd.

i.e. Wave Group, which owns four listed companies, namely Wave Information, Wave Software, Wave International and Huaguang Optoelectronics, with business covering four industry clusters, namely cloud data center, cloud service big data, smart city and smart enterprise, provides IT products and...

Command Execution Vulnerability in the Backend of Super Star Huiya Digital Book Literature Service System

Beijing Century Super Star Information Technology Development Limited Liability Company Super Star is one of the companies engaged in the digitization of paper materials and the production of electronic publications. A command execution vulnerability exists in the backend of the Super Star Huiya...

keycloak: session hijack using the user access token

Keycloak up to version 6.0.0 allows the end user token access or id token JWT to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user’s browser session...

SQL Injection Vulnerability in na***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Aike CMS background na.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in na***_ed***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the backend naed.php of Acme CMS, which can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in co***_ru***_ed***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the backend corued.php of Acme CMS, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in na***_ed***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the backend naed.php of Acme CMS, which can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in Acme CMS Backend no***.php

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Aike CMS background no.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in co***_ru***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the backend coru.php of Acme CMS, which can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in Acme CMS Backend po***.php

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Acme CMS background po.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in ca***_ru***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the backend caru.php of Acme CMS, which can be exploited by attackers to obtain sensitive informatio...

SQL Injection Vulnerability in me***_re***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Aike CMS background mere.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Information Disclosure in Page Tree

It has been discovered backend users not having read access to specific pages still could see them in the page tree which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability...

Fedora Update for evolution-data-server FEDORA-2019-3a2cc6a0b9

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Misconfiguration in User Session Handling

When users change their password existing sessions for that particular user account are not revoked. A valid backend or frontend user account is required in order to make use of this vulnerability...

Design/Logic Flaw

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded encryption key. Extraction of the encryption key is necessary for deciphering communications between this application and the backend server. This, in combination with...