2044 matches found
SQL Injection Vulnerability in Frontend me***.Asp Page of Rongguang Information Ordering and Consumption System
Rongguang Information Ordering and Picking Up Food Consumption System is a multi-functional ordering system developed by Shenzhen Rongguang Information Co. SQL injection vulnerability exists in the front-end me.Asp page of Rongguang Information Ordering and Consumption System, which can be...
Storage-type cross-site scripting vulnerability at the front-end posting message of PawnBuilder CMS
SmallBuild CMS is a website management backend based on the OneThink open source framework. A stored cross-site scripting vulnerability exists in the front-end posting message of PawnBuilder CMS. Attackers by building a CSRF add administrator user can insert malicious js code in the page to obtai...
DSMALL open source mall B2B2C front-end storage type cross-site scripting attack vulnerabilities
DSMALL open source mall B2B2C is a very professional shopping mall system source code , through this set of source code can create a shopping mall website , suitable for doing Taobao or do e-commerce platform users. DSMALL open source mall B2B2C front storage type cross-site scripting attack...
SQL Injection Vulnerability in Dscms
Dscms is an enterprise website builder based on TP5.0 framework development, using PHP + Mysql architecture. Dscms 0.1 version of the front-end SQL injection vulnerability, the vulnerability stems from the failure to filter the parameter $id, attackers can use the vulnerability to obtain sensitiv...
Captcha bypass in extension "Front End User Registration" (sr_feuser_register)
When the extension is used together with the TYPO3 Extension srfreecap, it is possible to bypass the catcha in the registration form...
Bootstrap Cross-Site Scripting Vulnerability (CNVD-2018-13371)
Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in the data-container attribute of tooltip in versions of Bootstrap prior to 4.1.2. A remote attacker can exploit this vulnerability to inject arbitrary web...
Sql injection
The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php...
CVE-2018-13049
The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php...
youke365 V1.0.7 最新版 前台SQL注入
...
PHPMyWind 5.5前台存在sql注入，可重置管理员密码
...
DOM-type cross-site scripting vulnerabilities in the front-end of Xingyunhai CMS (XYHcms)
Xing Yunhai CMS XYHcms is a completely open source CMS content management system. Xing Yunhai CMS XYHcms front-end DOM-type cross-site scripting vulnerabilities. Attackers can use the vulnerability to insert js code in the packet to obtain user cookies and other information...
SQL Injection Vulnerability in Cloud EC E-commerce System at Front-end User Comments
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system SQL injection vulnerability exists in the front-end user comments. Attackers can use...
Cloud EC e-commerce system SQL injection vulnerability in the foreground
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system SQL injection vulnerability exists in the frontend. Attackers can use the...
SQL Injection Vulnerability in Cloud EC E-commerce System at Front-end Order Evaluations
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system SQL injection vulnerability exists at the front-end order evaluation. Attackers can...
Use the password reset functions to achieve account-hijacking-vulnerability warning-the black bar safety net
Recently, I attended a platform to invite vulnerability testing project, in which the discovery of a unique account hijacking vulnerability, the entire vulnerability discovery process very unexpected but also very lucky, by the password reset function can be achieved account hijacking, and I will...
October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting
Exploit Title: October CMS User Plugin v1.4.5 - Persistent Cross-Site Scripting Date: 2018-04-03 Author: 0xB9 Software Link: https://octobercms.com/plugin/rainlab-user Version: 1.4.5 Tested on: Ubuntu 17.10 CVE: CVE-2018-10366 1. Description: Front-end user management for October CMS. Allows...