594 matches found
Cross site scripting
S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in /function/booksave.php...
Cross site scripting
S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in the search function...
CVE-2020-20426
S-CMS Government Station Building System v5.0 contains a cross-site scripting XSS vulnerability in /function/booksave.php...
CVE-2020-20426
S-CMS Government Station Building System v5.0 is affected by a cross-site scripting (XSS) vulnerability in /function/booksave.php. The issue is documented across multiple sources as a PHP/MySQL CMS vulnerability; the root cause is unvalidated input processed by that endpoint, enabling script exec...
CVE-2020-20425
S-CMS Government Station Building System v5.0 (PHP/MySQL CMS) includes a cross-site scripting (XSS) vulnerability in the search function. The CVE description confirms XSS in this release; connected sources reiterate S-CMS v5.0 as affected and describe the vulnerability class. No root cause detail...
S-CMS 跨站脚本漏洞
S-CMS is a PHP and MySQL-based content management system CMS from S-CMS China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to execute cross-site scripting attack XSS via /function/booksave.php...
SQL Injection Vulnerability in the Website Building System of Jereh Information Business Limited
Jereh Information Business Limited is a company that has completed thousands of corporate websites, e-commerce websites, event websites, as well as a variety of function-specific programs and apps for thousands of companies and organizations. A SQL injection vulnerability exists in the website...
HuCart suffers from SQL injection vulnerability (CNVD-2021-54040)
HuCart is an open source enterprise building system. HuCart has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
MipCMS server-side request forgery vulnerability
MipCMS is an application software. A content management system based on Baidu Mobile Accelerator MIP and an SEO website building system. mipCMS 5.0.1 has a server-side request forgery vulnerability that can be exploited by attackers to access sensitive information...
Shaanxi Silicon Peak Network Technology Co., Ltd. website building system has file upload vulnerability
Shaanxi Silicon Peak Network Technology Co., Ltd. was founded in 2007 is a "website design, software development, microblogging, Internet marketing, e-commerce" and other integrated information technology services in one of the high-end brand IT organizations. Shaanxi Silicon Peak Network...
MipCMS 代码问题漏洞
MipCMS is an application software. A content management system based on Baidu Mobile Accelerator MIP and an SEO website building system. mipCMS 5.0.1 has a server-side request forgery vulnerability that can be exploited by attackers to access sensitive information...
Nantong Runbang Network Technology Co., Ltd. website building system has SQL injection vulnerabilities
Nantong Runbang Network Technology Co., Ltd. is a company dedicated to providing in-depth and rich interactive solutions for Internet companies and brand markets. There is a SQL injection vulnerability in the website building system of Nantong Runbang Network Technology Co., Ltd, which can be...
SQL Injection Vulnerability in YimaoAdmin (CNVD-2021-46690)
YimaoAdmin is a website builder. YimaoAdmin suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
XSS Vulnerability in the Website Building System of Beijing Bolehoo Technology Co.
Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. There is an XSS vulnerability in the website builder system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...
SQL injection vulnerability in website building system of Suzhou Ernst Network Technology Co.
Suzhou Ernst Network Technology Co., Ltd. is a marketing plan, providing medium and high-end website design, graphic design, program development and network marketing and with Suzhou Topps Network Technology Co. Suzhou Ernst Network Technology Co., Ltd. building system there are SQL injection...
SQL injection vulnerability in website building system of Suzhou Ernst Network Technology Co.
Suzhou Ernst Network Technology Co., Ltd. is a marketing plan, providing medium and high-end website design, graphic design, program development and network marketing and with Suzhou Topps Network Technology Co. Suzhou Ernst Network Technology Co., Ltd. building system there are SQL injection...
SQL Injection Vulnerability in YimaoAdmin
YimaoAdmin is a website builder. YimaoAdmin suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
YimaoAdmin suffers from SQL injection vulnerability (CNVD-2021-46691)
YimaoAdmin is a website builder. YimaoAdmin suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in CLTPHP (CNVD-2021-47679)
CLTPHP is a website building system based on thinkphp. CLTPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...