SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend re***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend sh***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

OSV-2020-2131 Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26997 Crash type: Stack-use-after-return READ 8 Crash state: solidity::smtutil::CHCSmtLib2Interface::querySolver solidity::smtutil::CHCSmtLib2Interface::query solidity::frontend::CHC::query...

squid: HTTP Request Splitting issue in HTTP message processing

An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches between a client and Squid with attacker-controlle...

SQL Injection Vulnerability in FangfaCms

Method Digital Web Content Management System FangfaCms is an enterprise-level PHPCMS website management system. A SQL injection vulnerability exists in the frontend Fl.cls.php of FangfaCms. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in CMS Frontend

Situ CMS is the short name of Situ Tourism Website Management System, which is a self-developed website management system applicable to the construction of tourism websites. A SQL injection vulnerability exists in the frontend of SITO CMS. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in TuziCMS Frontend

TuziCMS TC for short is an enterprise web content management system based on PHP+MySql. There is a SQL injection vulnerability in the MS frontend. An attacker can exploit the vulnerability to obtain sensitive database information...

XSS Vulnerability in CUPCMS v5.0 Frontend

CUPCMS v5.0 cup content management system integrates video, stars, news, comics, community and more. An XSS vulnerability exists in the frontend of CUPCMS v5.0, which can be exploited by attackers to obtain sensitive information from user cookies...

Stored XSS Vulnerability in ForestBlog Frontend

ForestBlog is a simple SSM blogging system. A stored XSS vulnerability exists in the ForestBlog frontend that can be exploited by an attacker to obtain an administrator cookie...

Command Execution Vulnerability in Frontend of Shining Enterprise Website Builder System

Zibo Shining Network Technology Co., Ltd. in November 2014, the company's business scope includes: computer software, hardware development and sales, Internet technology development, technical services and so on. Shining enterprise website building system foreground there is a command execution...

[20210307] - Core - ACL violation within com_content frontend editing

Incorrect ACL checks could allow unauthorized change of the category for an article...

HTTP Request Smuggling in Agoo

agoo through 2.12.3 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be...

SQL Injection Vulnerability in ZZCMS Frontend (CNVD-2020-59408)

ZZCMS is a content management system. A SQL injection vulnerability exists in the frontend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in YYcms Frontend Login Page

YYCMS movie and television, rain rain CMS movie and television, is a fully automatic collection of video sites. YYcms foreground login page exists SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Shield Spirit Original Article Submission System 1.0 SQL Injection Vulnerability in Frontend

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 suffers from a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information from the database...

Open-Xchange: XSS - Notes - Attribute injection through overlapping tags

The Notes app uses simple markup language to format the content, which is later converted to HTML for display. javascript // frontend/ui/apps/io.ox/notes/parser.js parsePlainText: function text var lines = .escapetext.split/\n/, openList; ... var html = lines.join'' .replace/!\.?/g, ''...

GHSA-F7WM-X4GW-6M23 Contao Insert tag injection in forms

Impact It is possible to inject insert tags in front end forms which will be replaced when the page is rendered. Patches Update to Contao 4.4.52, 4.9.6 or 4.10.1. Workarounds Disable the front end login form and do not use form fields with array keys such as fieldname. References...

Logic Flaw Vulnerability in PCFCMS Frontend

PCFCMS is based on TP6.0 + framework for the core development of simple + general content management system. There is a logic flaw vulnerability in the frontend of PCFCMS, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in e-cology 8.0 Frontend of Shanghai Panmicro Network Technology Co.

e-cology is a collaboration platform. A SQL injection vulnerability exists in the frontend of e-cology 8.0 of Shanghai Panmicro Networks Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

HTTP Request Smuggling

squid3 is vulnerable to HTTP request smuggling. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches between a client and Squid with attacker-controlled content ...