SQL injection vulnerability in mallbuilder frontend plugin_product_class.php page

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. A SQL injection vulnerability exists in the pluginproductclass.php page in the frontend of mallbuilder, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

Cross-site scripting vulnerability in Yzmcms frontend

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. Yzmcms frontend has cross-site scripting vulnerabilities. Attackers can insert malicious js code in the page to obtain user cookies an...

Cookie injection vulnerability in mallbuilder frontend v7.3.4 home.php file

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. mallbuilder v7.3.4 has a SQL injection vulnerability in the foreground home.php, which allows attackers to obtain sensitive database information using common SQL injection tools...

[SECURITY] Fedora 24 Update: cacti-1.0.4-1.fc24

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

[SECURITY] Fedora 25 Update: cacti-1.0.4-1.fc25

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

TYPO3 Frontend Authentication Bypass Vulnerability

Typo3 is one of the leading brands of open source content management systems CMS and content management frameworks CMF based on PHP and MySQL databases and is a powerful open source solution. An authentication bypass vulnerability exists in TYPO3 Frontend. An attacker can exploit the vulnerabilit...

[SECURITY] [DSA 3802-1] zabbix security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3802-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 05, 2017 https://www.debian.org/security/faq -...

Browser-based GDB frontend: gdbGUI

A modern, browser-based frontend to gdb gnu debugger. Add breakpoints, view stack traces, and more in C, C++, Go, and Rust! Simply run gdbgui from the terminal and a new tab will open in your browse Features Debug a different program in each tab new gdb instance is spawned for each tab Set/remove...

Authentication Bypass in TYPO3 Frontend

More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-002/...

Authentication Bypass in TYPO3 Frontend

It has been discovered, that TYPO3 CMS is vulnerable to Authentication Bypass. Component Type: TYPO3 CMS Release Date: February 28, 2017 Vulnerable subcomponent: Frontend Vulnerability Type: Authentication Bypass Affected Versions: Versions 8.2.0 to 8.6.0 Severity: Medium Suggested CVSS v2.0:...

Semcms V2.1 header header injection vulnerability in frontend

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms using php and vb language writing, combined with apache or iis running. Semcms foreign trade web content...

Unrestricted SQL Injection Vulnerability in Frontend of iWebSNS Enterprise Social Networking Platform

iWebSNS is a set of open source SNS social networking software built on LAMP development. iWebSNS enterprise social networking platform front-end there are unlimited SQL injection vulnerabilities. As the source code servtools\menupop\translatepri.php tname, vid and tem variables failed to strictl...

id.frontend.jobespresso.net XSS vulnerability

Vulnerable URL: http://id.frontend.jobespresso.net/?l=xss%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E=xss%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E=xss%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E& Details: Description...

SQL Injection Vulnerability in DBSHOP_0.9.3_Beta Frontend

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta front SQL injection vulnerability . Due to /module/Shopfront/src/Shopfront/Controller/ArticleController.php at the id parameter spliced into the infoArticle failed to use quotation marks filter ,...

[SECURITY] Fedora 23 Update: irssi-0.8.20-2.fc23

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

[SECURITY] Fedora 24 Update: irssi-0.8.20-2.fc24

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

[SECURITY] Fedora 25 Update: irssi-0.8.20-2.fc25

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

Sophos UTM Frontend Component Information Disclosure Vulnerability

Sophos UTM aka Astaro Security Gateway is a suite of unified threat management appliances from Sophos UK. The appliance provides gateway security protection and endpoint security protection. An information disclosure vulnerability exists in the Frontend component of Sophos UTM using firmware...

Sophos UTM Frontend Component Local Information Disclosure Vulnerability

Sophos UTM aka Astaro Security Gateway is a suite of unified threat management appliances from Sophos UK. The appliance provides gateway security protection and endpoint security protection. An information disclosure vulnerability exists in the Frontend component of Sophos UTM using firmware...

CVE-2016-7442

The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the proxy user settings in "system settings / scan settings / anti spam" configuration tab...