11151 matches found
Universal Password Login Vulnerability in Tatsui Import Preamplifier System
Shanghai Chenrui Information Technology Company is a wholly-owned subsidiary of the Third Research Institute of the Ministry of Public Security. With information security as its main business direction, Chenrui is mainly engaged in the development and integration of products in computer network...
Weak Password Vulnerability in Tianxing Security One-way Import System Database
Tianxing Security One-way Import System is a network security product of Beijing Tianxing Net Security Information Technology Co., Ltd. for one-way data transmission across security domains. The product consists of importing preamplifier PAS and importing server IAS, which can provide a...
metinfo6.0.0后台update注入（三）
...
Faraday v3.0 - Collaborative Penetration Test and Vulnerability Management Platform
This new version has made major architectural changes to adapt the software to the new challenges of cybersecurity. It focuses on processing large volumes of data and facilitating user interaction with Faraday in their environment. Faraday just got much faster Architecture changes and a new...
Arbitrary File Deletion Vulnerability in GreenCMS Backend
GreenCMS is an open source content management system written in PHP by Green Shade Studio, which is based on ThinkPHP, the most popular PHP development framework in China. GreenCMS background there are any file deletion vulnerability , attackers can use the vulnerability to delete any file...
CVE-2017-7470
It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py...
Code Execution Vulnerability in the background of seacms website builder system
seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms website builder system, which can be exploited by attackers to execute remote code...
Code Execution Vulnerability in Gxlcms News System
Gxlcms News System is a news cms content management system developed in php+mysql. Gxlcms news system has a code execution vulnerability that can be exploited by an attacker to execute remote code...
XYHCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-13984)
XYHCMS is an open source content management system CMS. A cross-site request forgery vulnerability exists in xyhai.php?s=/Auth/addUser URL in XYHCMS version 3.5. A remote attacker can exploit this vulnerability to add a backend administrator account...
Local File Inclusion
October CMS is vulnerable to local file inclusion. The function validatePath in modules/system/classes/MediaLibrary.php does not perform validation of file paths. This allows an attacker to manipulate the folder names with ../ characters through the request headers to retrieve confidential system...
Stored Cross-Site Scripting Vulnerability in PHPMyWind v5.5 Backend
HPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A stored cross-site scripting vulnerability exists in the backend of PHPMyWind v5.5. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user...
CVE-2018-1999009
October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php244 makeFileContents function that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend pat...
Design/Logic Flaw
October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php244 makeFileContents function that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend pat...
joyplus-cms cross-site scripting vulnerability (CNVD-2018-14238)
joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A cross-site scripting vulnerability exists in...
[SECURITY] Fedora 28 Update: evolution-data-server-3.28.4-1.fc28
The evolution-data-server package provides a unified backend for programs t hat work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...
LocalTapiola: F5 BigIP Backend Cookie Disclosure
Basic report information Summary: The Same issue was reported on www.myynti.lahitapiolarahoitus.fi by another reporter. It was fixed for that. But when I test the same issue on lahitapiolarahoitus.fi. It is also causing leakage of information. Description: I just identify F5 BigIP load balancers...
joyplus-cms SQL Injection Vulnerability
joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A SQL injection vulnerability exists in joyplus-c...