Dolphin Education Cloud has a flawed logic vulnerability

Ltd. was founded in 2012, is a comprehensive software and information services of high-tech dual-soft enterprise. A logic flaw vulnerability exists in Dolphin Education Cloud, which can be exploited by attackers to obtain sensitive information...

CVE-2021-27969

Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter...

CVE-2021-27969

Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter...

Design/Logic Flaw

Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter...

CVE-2021-27969

Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter...

CVE-2021-27969

Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter...

CVE-2021-27969

Dolphin CMS 7.4.2 has a stored XSS flaw exploitable via the Page Builder “width” parameter. Multiple sources (NVD, Red Hat, OSV, CVE registries) consistently describe this issue as a stored cross-site scripting vulnerability in Dolphin CMS 7.4.2, with the root cause being unsafely handled input f...

CVE-2021-27969: Improper Neutralization of Input During Web Page Generation

Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter...

PT-2021-17699

Name of the Vulnerable Software and Affected Versions: Dolphin CMS version 7.4.2 Description: The issue concerns stored XSS via the Page Builder width parameter. Recommendations: For Dolphin CMS version 7.4.2, consider restricting the use of the Page Builder width parameter until a patch is...

OpenSourceCMS.com Dolphin CMS 跨站脚本漏洞

OpenSourceCMS.com Dolphin CMS is OpenSourceCMS.com open source an application system . It provides a CMS framework for building websites. A security vulnerability exists in Dolphin CMS 7.4.2, which originates from the Page Builder "width" parameter...

Boonex Dolphin 7.4.2 - (width) Stored XSS Vulnerability

Exploit Title: Boonex Dolphin 7.4.2 - 'width' Stored XSS Exploit Author: Piyush Patil Vendor Homepage: https://www.boonex.com/ Software Link: https://www.boonex.com/downloads Version: 7.4.2 Tested on: Windows 10 Reference -...

Boonex Dolphin 7.4.2 Cross Site Scripting

Exploit Title: Boonex Dolphin 7.4.2 - 'width' Stored XSS Date: 18-03-2021 Exploit Author: Piyush Patil Vendor Homepage: https://www.boonex.com/ Software Link: https://www.boonex.com/downloads Version: 7.4.2 Tested on: Windows 10 Reference -...

Boonex Dolphin 7.4.2 - 'width' Stored XSS

Exploit Title: Boonex Dolphin 7.4.2 - 'width' Stored XSS Date: 18-03-2021 Exploit Author: Piyush Patil Vendor Homepage: https://www.boonex.com/ Software Link: https://www.boonex.com/downloads Version: 7.4.2 Tested on: Windows 10 Reference -...

PT-2020-12961 · Apache +1 · Dolphinscheduler +2

Name of the Vulnerable Software and Affected Versions: DolphinScheduler versions 1.2.0 through 1.2.1 Apache Zeppelin versions prior to 0.11.1 Description: A remote code execution issue exists when choosing MySQL as the database, potentially allowing an attacker to inject sensitive configuration o...

FreeBSD : ark -- extraction outside of extraction directory (38fdf07b-e8ec-11ea-8bbe-e0d55e2a8bf9)

Albert Astals Cid reports : Overview A maliciously crafted TAR archive containing symlink entries would install files anywhere in the user's home directory upon extraction. Proof of concept For testing, an example of malicious archive can be found at dirsymlink.tar Impact Users can unwillingly...

ark -- extraction outside of extraction directory

Albert Astals Cid reports: Overview A maliciously crafted TAR archive containing symlink entries would install files anywhere in the user's home directory upon extraction. Proof of concept For testing, an example of malicious archive can be found at dirsymlink.tar Impact Users can unwillingly...

ark -- directory traversal

KDE Project Security Advisory reports: KDE Project Security Advisory Title: Ark: maliciously crafted archive can install files outside the extraction directory. Risk Rating: Important CVE: CVE-2020-16116 Versions: ark Date: 30 July 2020 Overview A maliciously crafted archive with "../" in the fil...

Unauthorized Access Vulnerability in Dolphin Notebook Order Android APP of Beijing Smooth Entertainment Technology Co.

Dolphin Bookkeeping App is a professional and simple mobile bookkeeping software. There is an unauthorized access vulnerability in Dolphin Bookkeeping App for Android, which can be exploited by attackers to obtain sensitive information...

MGASA-2020-0193 Updated dolphin-emu packages fix security vulnerability

Updated dolphin-emu package fixes security vulnerabilities Dolphin Emulator includes a modified copy of the SoundTouch library at version 1.9.2. That version is subject to the following security issues: - The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9....

Updated dolphin-emu packages fix security vulnerability

Updated dolphin-emu package fixes security vulnerabilities Dolphin Emulator includes a modified copy of the SoundTouch library at version 1.9.2. That version is subject to the following security issues: - The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9....