SQL injection vulnerability in CircleManage/FindUsersForAll.aspx page of ECTS website building system of Shanghai Hongyu Information Technology Co.

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. A SQL injection vulnerability exists in the CircleManage/FindUsersForAll.aspx page of the product, which can be...

SQL injection vulnerability in CircleManage/FindUsers.aspx page of ECTS website building system of Shanghai Hongyu Information Technology Co.

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. A SQL injection vulnerability exists in the CircleManage/FindUsers.aspx page of the product, which can be exploited t...

MyBB 1.6.12 - Admin Panel FPD & Multiple XSS

Latest mybb forums suffers on multiple persistent cross site scripting vulnerability and single full path disclosure. Probably, there are more bugs because of poor content filtration. Title: MyBB 1.6.12 - Admin Panel FPD & Multiple XSS Date: 01.11.2014 Tested on: Linux 3.7-trunk-686-pae 1 SMP...