11151 matches found
WordPress Plugin Chained Quiz 1.0.8 - 'answer' SQL Injection
Exploit Title: WordPress Plugin Chained Quiz 1.0.8 - 'answer' SQL Injection Exploit Author: Çlirim Emini Website: https://www.sentry.co.com Software Link: https://wordpress.org/plugins/chained-quiz/ Version/s: 1.0.8 and below Patched Version: 1.0.9 CVE : N/A WPVULNDB:...
Vulnerability of Over-authorized Access in the Backend of Lan Yu Tianshen Meteorological Business Service System
Lanyu Tenchen Meteorological Business Service System is a complete public meteorological service business system developed by Chongqing Lanyu Tenchen Technology Co. A vulnerability exists in the background of Lanyu Tenchen Meteorological Service System, which stems from the system's failure to...
QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams
A heap buffer overflow issue was found in the way SLiRP networking back-end in QEMU processes fragmented packets. It could occur while reassembling the fragmented datagrams of an incoming packet. A privileged user/process inside guest could use this flaw to crash the QEMU process resulting in DoS...
Vulnerabilities in the Website Building System of Shanghai JUE Solutions Information Technology Co.
Ltd. provides Shanghai professional website construction, WAP website construction, mobile APP development, website revision, web design, website promotion, integrated marketing. There is a vulnerability in the website builder system that can be exploited by an attacker to log in to the backend...
Backend Login Bypass Vulnerability in Tale Blog System
Tale blog system is a java development blog system. A backend login bypass vulnerability exists in Tale Blog System. An attacker can exploit this vulnerability to construct a cookie to log into any account...
DEBIAN-CVE-2018-6553
The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to...
CVE-2018-6553
The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to...
SQL Injection Vulnerability in MetInfo Website Backend
MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A SQL injection vulnerability exists in the backend of MetInfo version 6.1.0 website. An attacker can exploit this vulnerability to obtain sensitive database information...
IM-Learning Intelligent Learning Management System Vulnerability in Backend
IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and extended. An arbitrary password login vulnerability exists in the backend of Guangyi East IM-Learning Intelligent Learning Management System, which can be exploited by...
openSUSE: Security Advisory for cups (openSUSE-SU-2018:2239-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SQL Injection Vulnerability in Azeus CMS 2.0 Backend
Central CMS 2.0 is a cms system made by Central Studio, this CMS is written in UTF-8 coding. Azeus CMS 2.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...
Security update for cups (moderate)
This update for cups fixes the following issues: The following security vulnerabilities were fixed: - CVE-2017-18248: Handle invalid characters properly in printing jobs. This fixes a problem that was causing the DBUS library to abort the calling process. bsc1061066 bsc1087018 - Fixed a local...
QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10280)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/album.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10275)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/slideshow.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
QCMS cross-site scripting vulnerability (CNVD-2019-10284)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/category.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
EMLsoft 'numPerPage' Parameter SQL Injection Vulnerability
EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.address.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the he...
QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10281)
QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/news.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
QCMS Cross-Site Request Forgery Vulnerability
QCMS is an open source content management system CMS for creating responsive websites. A cross-site request forgery vulnerability exists in QCMS 3.0.1, which can be exploited by remote attackers to perform unauthorized operations with the help of the backend/user/admin/add.html URI...