CVE-2014-3413

The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive information and consequently obtain administrative control by leveraging database access...

Information Disclosure

Apache Drill is vulnerable to information disclosure. The application logs passwords in plain text when connecting a database, allowing a malicious user with access to the logs access to sensitive information...

Square 9 GlobalForms SQL Injection Vulnerability

Square 9 GlobalForms is a web form management software from Square 9 Softworks. The software collects Web form data and automatically populates it with keywords. A SQL injection vulnerability exists in the 'match' parameter in Square 9 GlobalForms version 6.2.x. A remote attacker could use this...

Code injection

DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselectmain.php because code within the database is accessible to uploads/dede/syscacheup.php...

SQL Injection Vulnerability in Multiple Pages of Website Building System of Beijing Tiandi Huada Network Technology Co.

Ltd. is a network company that researches, promotes and develops new technologies and devotes itself to enterprise informatization services. It is a Beijing network company that provides comprehensive e-commerce consulting and solutions based on the Internet, and owns a number of products and...

SQL Injection Vulnerability in CMS, a Personal Card Issuing Platform Program

Personal card issuance platform program source code is a PHP + MySQL development of card issuance platform source code. A SQL injection vulnerability exists in the Personal Card Issuing Platform program CMS. The vulnerability stems from the program's failure to perform effective filtering. An...

CVE-2018-8968

An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8968

An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8965

An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8968

An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

Directory traversal

An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8965

An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8969

An issue was discovered in zzcms 8.2. user/licencesave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

Directory traversal

An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

Directory traversal

An issue was discovered in zzcms 8.2. user/licencesave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8969

CVE-2018-8969 affects zzcms 8.2, specifically the user/licence_save.php endpoint. The vulnerability allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter of an action=modify request, which can be used to progress to database access by deleting...

CVE-2018-8968

An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8965

The CVE-2018-8965 entry affects zzcms v8.2, specifically the user/ppsave.php endpoint. An issue in the oldimg parameter of an action=modify request allows remote attackers to perform directory traversal and delete arbitrary files (notably install.lock), enabling potential database access. Evidenc...

CVE-2018-8968

CVE-2018-8968 affects zzCMS version 8.2, specifically the user/manage.php endpoint. A vulnerability in the handling of directory traversal sequences in the oldimg and oldflv parameters within an action=modify request allows remote attackers to delete arbitrary files (including install.lock), crea...

YUNUCMS \app\admin\controller\Common.php page has secondary injection vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS V1.0.7 \app\admin\controller\Common.php page has a secondary injection vulnerability. An attacker can exploit the vulnerability ...