SQL Injection Vulnerability in ZZCMS Frontend

ZZCMS is a content management system for Merchants Network. A SQL injection vulnerability exists in the frontend of ZZCMS. An attacker can exploit this vulnerability to obtain sensitive information from the database...

@ia-cloud/node-red-contrib-ia-cloud-dashboard (>=0.0.1, <=0.0.4), @telligro/opal-setup (>=0.3.0, <=0.3.1) +4 more potentially affected by CVE-2019-10756 via node-red-dashboard (>=2.3.11, <=2.15.0)

node-red-dashboard NPM version =2.3.11, =0.0.1, =0.3.0, =0.0.5, =0.1.0, =0.3.3, =1.0.11, =1.0.17 Source cves: CVE-2019-10756 Source advisory: OSV:GHSA-XG59-M7WX-853Q...

CVE-2019-16698

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...

Design/Logic Flaw

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...

CVE-2019-16698

The CVE-2019-16698 issue affects the TYPO3 Direct Mail extension (direct_mail) up to version 5.2.2. A missing access check in the backend module allows a user with restricted permissions (to fe_users) to view and export data of frontend newsletter subscribers. The condition is an information-disc...

WordPress ACF-Frontend-Display Plugin File Upload Vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ACF-Frontend-Display is a plugin used to display ACF forms on the front end of the site. A file upload vulnerability exists i...

CVE-2015-9479

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...

Design/Logic Flaw

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...

CVE-2015-9479

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...

CVE-2015-9479

The CVE-2015-9479 issue affects the WordPress ACF-Frontend-Display plugin (versions up to 2015-07-03): it allows arbitrary file upload through an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php. Connected documents confirm the vulnerability description; no expl...

SQL Injection Vulnerability in Frontend of Queue Evaluation Integrated Management System V5.3

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

File upload vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41009)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. Queue Evaluation Integrated Management System V5.3, there is a file upload...

SQL injection vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41011)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

commons-beanutils - Authorization Bypass in confserver/confluence-frontend-plugins (master)

h1. Authorization Bypass in confserver/confluence-frontend-plugins master| h4. Issue Details Vulnerability: Authorization Bypass Severity: color:f9423aHighcolor Project: confserver/confluence-frontend-plugins Branch: master Scan Date: Unknown h4. Issue Description commons-beanutils2 is vulnerable...

XSS Vulnerability in anyoucms Frontend User Messages

anyoucms is a website building system. An XSS vulnerability exists in anyoucms front-end user comments, which can be exploited by attackers to execute script code...

SQL Injection Vulnerability in zzcms 2019 Frontend

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable guarantee. zzcms 2019 front-end SQL injection vulnerability,...

SQL injection vulnerability in zzcms 2019 frontend (CNVD-2019-37717)

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable protection. Open source, independent functional modules, to...

SQL injection vulnerability in yiqicms frontend pr***.php file

Yiqi CMS yiqicms is a content management system CMS for marketing-oriented enterprise websites. A SQL injection vulnerability exists in the yiqicms front-end pr.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

File upload vulnerability in ThinkCMF frontend Ue***.cl***.php file

ThinkCMF is a Chinese content management framework based on PHP+MYSQL. A file upload vulnerability exists in the ThinkCMF frontend Ue.cl.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SQL injection vulnerability in yiqicms frontend pr***.php file

Yiqicms is a SEO-based marketing enterprise website system, using PHP+Mysql open source building system. There is a SQL injection vulnerability in the front pr.php file of yiqicms. Attackers can use this vulnerability to obtain sensitive information...