11184 matches found
Piwigo 2.8.2 / 2.9.2 Cross Site Scripting
Document Title: =============== Piwigo v2.8.2 & 2.9.2 CMS - Multiple Cross Site Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2005 Release Date: ============= 2018-01-12 Vulnerability Laboratory ID VL-ID:...
Fedora 26 : webkitgtk4 (2017-0ad0e2f390)
This update addresses the following vulnerabilities : - CVE-2017-13866, CVE-2017-13870, CVE-2017-7156, CVE-2017-13856 Additional fixes : - Make WebDriver implementation more spec compliant. - Fix a bug when trying to remove cookies before a web process is spawned. - WebKitWebDriver process no...
X6CMS backend has arbitrary file deletion vulnerability
X6CMS, fully known as Xiaoliu Website Content Management System, is a full-featured marketing website management platform with PHP+MYSQL architecture, built-in SEO optimization mechanism in the whole station, simple interface and convenient operation. X6CMS V2.220130305 version of the background...
IBM Security Key Lifecycle Manager SQL Injection Vulnerability
IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A SQL injection vulnerability exists ...
PHPOKCMS backend exists arbitrary file download vulnerability
PHPOKCMS is an enterprise station CMS system developed in PHP+MYSQL language. PHPOKCMS V4.8 version of the background of the existence of arbitrary file download vulnerability, attackers can use the vulnerability to download any file...
Override Access Vulnerability in SiteServer CMS Administration Backend
SiteServer CMS is a web content management system developed by Beijing Billion Software Technology Development Co. A vulnerability exists in the management background of SiteServer CMS. The vulnerability is due to the background access control using JWT technology for identity authentication, HTT...
Arbitrary File Deletion Vulnerability in IWebShop CMS Backend
iWebShop is an open source WEB e-commerce B2B2C building system based on the HP language and MYSQL database development , using the MVC architecture Yii framework thinking design mode of a product . IWebShop CMS backend exists arbitrary file deletion vulnerability. Attackers can use this...
Variable Override Vulnerability in MetInfo Version 5.3.19 at Password Retrieval
MetInfo is a Content Management System CMS developed using PHP and Mysql. A variable override vulnerability exists in MetInfo version 5.3.19 at the password retrieval. An attacker can exploit the vulnerability to obtain a password reset link, bypass authentication to change the administrator...
Cross-site request forgery vulnerability in DedeCMS v5.7 backend administration at custom tags
DedeCMS is a PHP open source website management system. A cross-site request forgery vulnerability exists in DedeCMS v5.7 at the backend administration custom tags. An attacker can exploit the vulnerability by submitting a specially crafted request to write to WebShell...
Code execution vulnerability in AddonsController.class.php file in backend of Thunderwind Movie CMS v3.3.4
Thunderwind Movie CMS is a PHP based THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. A code execution vulnerability exists in the AddonsController.class.php file in the backend of Thunderwind CMS...
openSUSE Security Update : evince (openSUSE-2017-1417)
This update for evince fixes the following issues : Security issue fixed : - CVE-2017-1000083: Remove support for tar and tar-like commands in comics backend bsc1046856. This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
Weak Password Vulnerability in Backend Management System of Suzhou Longye Network Technology Co.
Suzhou Longye Network Technology Co., Ltd. is a network company. It is mainly engaged in website project planning, webpage production, web-based database development and website maintenance. A weak password vulnerability exists in the backend management system of Suzhou Longye Network Technology...
SQL injection vulnerability in DayuCMS backend content.inc.php page
DayuCMS is a marketing-centered CMS system that incorporates search engine algorithms to facilitate businesses and individual webmasters. A SQL injection vulnerability exists in the content.inc.php page of DayuCMS backend. An attacker can exploit the vulnerability to obtain sensitive database...
Dedecms V5.7 Backend Co_add.php File Exists SQL Injection Vulnerability
DedeCMS is a PHP open source website management system. A SQL injection vulnerability exists in the Coadd.php file in the backend of Dedecms V5.7. Attackers can use the vulnerability to obtain sensitive information in the database...
Razer US: SQL Injection on careers.razerzone.com within the Admin interface without any access credentials
The researcher discovered a SQL Injection vulnerability on our careers.razerzone.com host, which is used to list job openings for Razer worldwide and receive application submissions from potential hires. This vulnerability could have allowed the exfiltration of admin credentials as well as person...
SUSE-SU-2017:3428-1 Security update for evince
This update for evince fixes the following issues: Security issue fixed: - CVE-2017-1000083: Remove support for tar and tar-like commands in comics backend bsc1046856...
IBM WebSphere Portal Information Disclosure Vulnerability (CNVD-2017-37868)
IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers and suppliers to access internal data through the platform. An information disclosure vulnerabili...
SQL Injection Vulnerability in Multiple Backend Locations in Daimi CMS v5.9.9
DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. A SQL injection vulnerability exists in several places in the backend of DAMI CMS...
CVE-2017-1757
IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858...