S-CMS Enterprise Website Builder System SQL Injection Vulnerability in Frontend

S-CMS Enterprise Station System is a mature and perfect enterprise station CMS system. S-CMS Enterprise Station System has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain database information...

SQL Injection Vulnerability in the Frontend of S-CMS Enterprise Website Building System (CNVD-2019-30292)

S-CMS Enterprise Station System is a mature and perfect enterprise station CMS system. S-CMS Enterprise Station System has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain database information...

Open-Xchange OX App Suite Content Spoofing / Cross Site Scripting

Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs appsuite, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product: OX...

Debian: Security Advisory (DLA-1876-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Password Reset Vulnerability in the Frontend of Nanjing Pintech Medical Online Exam System

Ltd. is a high-tech company dedicated to the research, development and sales of software products in the medical science and education industry. Nanjing Pinde Technology Medical Online Exam System There is a password reset vulnerability in the foreground, attackers can use the vulnerability to...

Information leakage vulnerability in the frontend of Yiqin General Attendance Management System V6.0

Beijing Yiqin Information Technology Co., Ltd. focuses on the research of labor force attendance and working hour solutions, and creates the Yiqin labor power and working hour management platform. Information leakage vulnerability exists in the frontend of Yiqin General Attendance Management Syst...

Project iKy v2.1.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface

Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Video Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...

SQL Injection Vulnerability in the Frontend of Far Autumn Medical Online Exam System v3.8

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

Far Autumn Medical Training Enrollment System v1.0 File Upload Vulnerability in Frontend

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

SQL Injection Vulnerability in the Frontend of Medical Online Exam System of Nanjing Pinde Technology Co.

Nanjing Pintech medical online examination system enables users to realize the organization and management of online examination work. SQL injection vulnerability exists in the front-end of Nanjing Pinde Technology's medical online examination system, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in the Frontend of Far Autumn Medical Training Enrollment System v1.0

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

Information leakage vulnerability in the frontend of Far Autumn Medical Online Exam System v1.0

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

Stored Cross-Site Scripting Vulnerability in Morphology Digital Lab Teaching Platform Frontend

Morphology digital experimental teaching platform is a virtual reality system with the core of computer virtual reality and digital simulation technology, supported by biosimulation engine, processing factor database, virtual environment interface and other technologies. Morphology digital...

SQL Injection Vulnerability in the Frontend of Morphology Digital Lab Teaching Platform

Morphology digital experimental teaching platform is a virtual reality system with the core of computer virtual reality and digital simulation technology, supported by biosimulation engine, processing factor database, virtual environment interface and other technologies. There is a SQL injection...

Command execution vulnerability in PbootCMS v1.4.1 frontend search page template

PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system, is a set of efficient, simple, strong and free commercial PHP CMS source code. PbootCMSv1.4.1 front-end search page templates have a command execution vulnerability that ca...

Real Estate 7 < 2.9.1 - Stored XSS & IDOR

The 'Real Estate 7' premium WordPress theme is vulnerable to persistent XSS injection that allows an attacker to inject JavaScript or HTML code into the website front-end. There is also an Insecure Direct Object Reference issue, allowing unauthorized users to edit listings they should not have...

Real Estate 7 < 2.9.1 - Stored XSS & IDOR

The 'Real Estate 7' premium WordPress theme is vulnerable to persistent XSS injection that allows an attacker to inject JavaScript or HTML code into the website front-end. There is also an Insecure Direct Object Reference issue, allowing unauthorized users to edit listings they should not have...

Information leakage vulnerability in the frontend of Morphology Digital Lab Teaching Platform

Morphology digital experimental teaching platform is a virtual reality system with the core of computer virtual reality and digital simulation technology, supported by biosimulation engine, processing factor database, virtual environment interface and other technologies. Morphology digital...

UBUNTU-CVE-2015-9289

In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23...

Stored Cross-site Scripting Vulnerability in UQCMS Single Merchant Edition Frontend

UQCMS Single Merchant System is an external display and shopping system suitable for running your own products. A stored cross-site scripting vulnerability exists in the frontend of UQCMS Single Merchant Edition. An attacker can exploit this vulnerability to obtain background administrator cookie...