Logic flaw vulnerability in the frontend of S-CMS enterprise website builder system

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise station building system front platform there is a logic flaw vulnerability, attackers can use the vulnerability to...

Arbitrary file download vulnerability in frontend of shopxo e-commerce system

ShopXO is an open source enterprise-level open source e-commerce system. shopxo e-commerce system foreground exists arbitrary file download vulnerability , an attacker can exploit the vulnerability to download any file on the server...

XSS vulnerability in frontend of super cms v2.39

Super CMS content management system in order to solve the problem of website optimization and development of a set of products, it is an efficient open source content management system, the product is based on PHP + MYSQL architecture, can run on Windows, Linux, MacOSX, Solaris and other various...

XSS Vulnerability in the Frontend of the Kaixin Helpdesk System

The Kaixin Helpdesk Helpdesk helps IT to collect the problems handled on a daily basis and generate reports to quantify the work. An XSS vulnerability exists in the frontend of the Qixing Helpdesk system, which can be exploited by attackers to obtain administrator cookie information...

SQL Injection Vulnerability in Yunye CMS Frontend

Yunye cms enterprise building system is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. Yunye CMS front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

Information leakage vulnerability in the frontend of Yiqin General Attendance Management System V6.0

Easy attendance general attendance management system is researched and developed by Beijing Jinmapu Technology Development Co., Ltd. The system is based on B/S architecture and developed by VS.NET+SQLSERVER, which can complete the information browsing and information processing in the attendance...

SQL Injection Vulnerability in Xingyunhai CMS Frontend

Xingyunhai CMS is a completely open source CMS content management system. Xingyunhai CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Backup File Download Vulnerability in UKcms Frontend

UKcms is a PHP-based content management system CMS by China Lingji Network Technology. A backup file download vulnerability exists in the frontend of UKcms. Under unauthorized circumstances, an attacker can exploit the vulnerability to construct links to directly download SQL backup information...

Stored Cross-site Scripting Vulnerability in Xionghai CMS Frontend Message Board Comments

Xionghai CMS is a set of comprehensive website management system that can be widely used in personal blogs, personal websites and corporate websites. Applicable to personal blogs, personal websites, corporate websites and other various purposes, the front end of the computer, mobile two display...

CVE-2010-3674

TYPO3 before 4.4.1 allows XSS in the frontend search box...

Design/Logic Flaw

TYPO3 before 4.4.1 allows XSS in the frontend search box...

CVE-2010-3674

TYPO3 before 4.4.1 allows XSS in the frontend search box...

CVE-2010-3674

TYPO3 before 4.4.1 allows XSS in the frontend search box...

CVE-2010-3674

TYPO3 (CMS/CMF) versions before 4.4.1 are affected by a cross-site scripting (XSS) vulnerability in the frontend search box. The issue arises from lack of proper validation of client-side data, enabling an attacker to inject scripts that run in a user’s browser. The available connected sources co...

CVE-2010-3669

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

Design/Logic Flaw

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

CVE-2010-3669

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

CVE-2010-3669

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

CVE-2010-3669

TYPO3 vulnerability CVE-2010-3669 affects frontend login box. Affects TYPO3 core/frontend login in versions: < 4.2.13, < 4.3.4 (4.3.x), and

SQL Injection Vulnerability in seacms Frontend

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the frontend of seacms, which can be exploited by attackers to obtain database sensitive information...