PHPOK enterprise website builder system has SQL injection vulnerability

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A SQL injection vulnerability exists in the frontend of PHPOK Enterprise CMS version 5.2.060. An attacker can exploit this vulnerability to obtain sensitive database information...

Stored Cross-Site Scripting Vulnerability in JYmusic Frontend

JYmusic is an open source cross-platform music management system. JYmusic frontend has a stored cross-site scripting vulnerability, an attacker can insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...

Stored cross-site scripting vulnerability in JYmusic frontend (CNVD-2019-13271)

JYmusic is an open source cross-platform music management system. JYmusic frontend has a stored cross-site scripting vulnerability, an attacker can insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...

Stored cross-site scripting vulnerability in JYmusic frontend (CNVD-2019-13272)

JYmusic is an open source cross-platform music management system. JYmusic frontend has a stored cross-site scripting vulnerability, an attacker can insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...

Stored cross-site scripting vulnerability in JYmusic frontend (CNVD-2019-13273)

JYmusic is an open source cross-platform music management system. JYmusic frontend has a stored cross-site scripting vulnerability, an attacker can insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...

XSS Vulnerability in Fish Leap CMS Frontend at Comments

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. An XSS vulnerability exists in the front-end comments of FishCenter CMS, which can be exploited by an attacker to obtain an administrator cookie...

XSS Vulnerability in FishLeap CMS Frontend Comments List

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. An XSS vulnerability exists in the front-end comment list of FishCare CMS, which can be exploited by an attacker to obtain an administrator cookie...

xss vulnerability in frontend comment manager of fishleap CMS

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. An XSS vulnerability exists in the front-end comment management system of FishCenter CMS, which can be exploited by an attacker to obtain an administrator cookie...

PYSEC-2019-201

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

UBUNTU-CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

File Upload Vulnerability in ArtCMS Frontend User Modified Avatar Location

ArtCMS is a website management system. A file upload vulnerability exists in ArtCMS at the location where the front-end user modifies his avatar. It allows attackers to upload a webshell and gain server privileges...

Cross-site Scripting (XSS)

com.liferay.frontend.taglib is vulnerable to cross-site scripting XSS. The vulnerability exists because the attribute value in a bookmark URL is not escaped, allowing an attacker to inject malicious script through it...

File Upload Vulnerability in EarCMS Frontend

EarCMS is a PHP open source system. EarCMS has a file upload vulnerability in the frontend that can be exploited by an attacker to upload malicious files, the vulnerability can be used to gain server privileges...

Jfinal cms xss vulnerability at frontend feedback

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

Jfinal cms xss vulnerability at frontend user profile

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

Jfinal cms xss vulnerability at frontend comments

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

CVE-2019-3821

CVE-2019-3821 affects the civetweb frontend used by Ceph RGW when SSL is enabled. The issue allows an unauthenticated attacker to open multiple connections to the Ceph RADOS gateway, exhausting file descriptors on ceph-radosgw and causing remote denial of service. The vulnerability is due to cive...

Arbitrary file upload vulnerability in zzphp frontend

zzphp is a free website building system developed using PHP. zzzphp front-end arbitrary file upload vulnerability, an attacker can exploit the vulnerability to upload malicious files to obtain server privileges...

UBUNTU-CVE-2019-3821

A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw service resulting in a remote denial of service...

SQL Injection Vulnerability in Frontend of Haitong Network Digital Currency Trading Platform

Haitong Network Digital Currency Trading Platform is a digital currency trading platform. A SQL injection vulnerability exists in the frontend of Haitong Network Digital Currency Trading Platform, which can be exploited by attackers to obtain sensitive information from the database...