11283 matches found
Remote Command Execution Vulnerability in Finecms V5.3.0 Backend
FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A remote command execution vulnerability exists in the backend of Finecms V5.3.0, which can be exploited by an attacker to write Trojan scripts to gain control of the server...
Quagga BGP Backend Program UPDATE Message Released Twice Vulnerability
Quagga is an open source routing software. A two release vulnerability exists in the Quagga BGP backend program processing UPDATE messages, which allows remote attackers to exploit the vulnerability to submit a special request, conduct a denial of service attack or execute arbitrary code...
Quagga BGP Backend Program NOTIFY Denial of Service Vulnerability
Quagga is an open source routing software. Quagga BGP backend program handling NOTIFY has a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests for denial-of-service attacks...
Slack: HTML Injection inside Slack promotional emails
Hi, There's a HTML injection vulnerability present inside emails sent from slack when the FIRST name on the account contains HTML. The html is stored in the backend database and when emails are sent promotional, etc, the HTML is sent along with the rest of the email. In my PoC, which is provided...
Multiple SQL Injection Vulnerabilities in iZhanCMS v2.1 Backend
Love Station CMS is an open source and free CMS content management system. iZhanCMS v2.1 version of the background there are multiple SQL injection vulnerabilities, attackers can exploit the vulnerability to obtain sensitive database information...
Joomla! PrayerCenter SQL Injection Vulnerability
Joomla! is an open source content management system CMS developed by the Open Source Matters team in the U.S. The system provides RSS feeds, site search, etc. PrayerCenter is used in one of the prayer sharing components. A SQL injection vulnerability exists in Joomla! PrayerCenter version 3.0.2. ...
Trend Micro Email Encryption Gateway SQL Injection Vulnerability (CNVD-2018-04494)
Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. A SQL injection vulnerability exists in the search configuration script in Trend...
CVE-2018-2370
Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...
Server side request forgery (ssrf)
Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...
CVE-2018-2370
Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...
PHPCMS backend has SQL injection vulnerability
PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the page phpcms/modules/pay/payment.php in the backend of PHPCMS, which can be exploited ...
The vulnerability of the Switch Configuration Tools Backend component (clcmd_server) of the Cumulus Linux operating system allows a hacker to execute arbitrary commands.
The vulnerability of the Switch Configuration Tools Backend component clcmdserver in the Cumulus Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary commands using metashell shells, utilizing the “cl-rctl”...
Code execution vulnerability in DedeCMS backend cache files
Weaving dream content management system DedeCms is a PHP open source website management system. A code execution vulnerability exists in the DedeCMS backend cache file. The vulnerability is due to the system mishandling of input information , allowing an attacker to exploit the vulnerability...
Code Execution Vulnerability in FineCMS Backend
FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A code execution vulnerability exists in the backend of finecms. An attacker can modify the background html template while injecting arbitrary code, resulting in arbitrary code...
Code execution vulnerability in QYKCMS backend down.php page
QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. A code execution vulnerability exists in the QYKCMS background down.php page. An attacker can exploit the vulnerability to execute script code and obtain server control privileges...
SQL Injection Vulnerability in XiaoCMS Backend Database.php Page
Based on PHP+Mysql architecture, XiaoCms Enterprise Builder is a small, flexible, simple and easy-to-use lightweight cms. A SQL injection vulnerability exists in the database.php page of XiaoCMS backend. An attacker can exploit this vulnerability to obtain sensitive information from the database...
Shopware 5.2.5/5.3 - Cross-Site Scripting
Document Title: =============== Shopware 5.2.5 & v5.3 - Multiple Cross Site Scripting Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1922 Shopware Security Tracking ID: SW-19834 Security Update:...
Code Execution Vulnerabilities in the Backend of Ourphp Website Builder System
Ourphp website building system is a php+mysql website building system. There is a code execution vulnerability in the background of Ourphp website builder v1.7.6, which is caused by the system failing to strictly filter special characters. An attacker can exploit this vulnerability to write...
Piwigo 2.8.2 / 2.9.2 Cross Site Scripting
Document Title: =============== Piwigo v2.8.2 & 2.9.2 CMS - Multiple Cross Site Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2005 Release Date: ============= 2018-01-12 Vulnerability Laboratory ID VL-ID:...