Ladder CMS Privilege Limit Bypass Vulnerability (CNVD-2019-09102)

Tianti tianti is a free lightweight CMS system written in Java , currently provides a total solution from the back-end management to the front-end display . A privilege restriction bypass vulnerability exists in Tianti 2.3, which can be exploited by a remote authenticated user to bypass the...

PT-2018-14808

Name of the Vulnerable Software and Affected Versions tianti version 2.3 Description The issue allows remote authenticated users to bypass intended permission restrictions. This can be achieved by visiting the "tianti-module-admin/cms/column/list" endpoint directly, which enables the user to read...

Kanboard Design Vulnerability (CNVD-2017-30947)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...