SQL Injection

Overview Npgsql is a .NET data provider for PostgreSQL. Affected versions of this package are vulnerable to SQL Injection by overflowing the sum of the integer and parameter lengths in NpgsqlConnector.FrontendMessages.cs, allowing arbitrary SQL to be injected into a PostgreSQL protocol message if...

Stored Cross-site Scripting Vulnerability in Hsycms Frontend Messages

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. A stored cross-site scripting vulnerability exists in the Hsycms frontend message. An attacker can insert malicious js code into...