mijnlijstenmakerij.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1048800 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

[SECURITY] Fedora 31 Update: cacti-1.2.8-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

TPshop open source mall file upload vulnerabilities exist in the foreground

TPshop open source mall is developed with the latest version of ThinkPHP shop mall. TPshop open source mall front-end file upload vulnerability. Allow attackers to upload webshell, get server privileges...

CSRF in extension "Change password for frontend users" (fe_change_pwd)

The extension fails to implement a CSRF protection for update password action...

Multiple vulnerabilities in extension "MKSamlAuth" (mksamlauth)

The extension fails to validate the response from the Identity Provider which allows an attacker to create various frontend users on affected TYPO3 websites...

Privilege Escalation in extension "femanager direct mail subscription" (femanager_dmail_subscribe)

Failing to properly check access rights, the extension is susceptible to privilege escalation, making it possible for a logged in frontend user to modify other frontend user records...

Cross-Site Scripting in Link Handling

It has been discovered that t3:// URL handling and typolink functionality are vulnerable to cross-site scripting. Not only regular backend forms are affected but also frontend extensions which use the rendering with typolink...

SQL Injection Vulnerability in the Frontend of Dascommerce Mall System

Big Business Mall System is a business creation network based on ten years of reconstruction of the e-commerce architecture, to create a set of operators, suppliers, purchasers, users, distribution, etc., in the PC and mobile devices are compatible with the operation of a complete set of offline ...

TuziCMS 2.0.6 SQL injection vulnerability in frontend ho*** us***.cl***.php

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS 2.0.6 front-end ho us.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Pushcoupon CMS Frontend

Push Couponer CMS is a completely free Taobao coupon website source code program that automatically collects products with coupons and automatically applies for high commission programs. Push Couponer CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensiti...

74cms 4.2.26 SQL Injection Vulnerability in Frontend Co***.php Page

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms 4.2.26 SQL injection vulnerability exists in the frontend Co.php page. An attacker can exploit the vulnerability to obtain sensitive information from the...

SQL Injection Vulnerability in ShopsN Frontend

ShopsN free version of the B2C e-commerce is a Shanghai Yisu Network Technology Co., Ltd. in line with the enterprise-class commercial standards of full-featured free commercial use of open source online store full network system. ShopsN front-end SQL injection vulnerability, attackers can exploi...

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

Codecat - Tool To Help In Manual Analysis In Codereview

CodeCat is a open source tool to help you in codereview, to find/track sinks and this points follow regex rules... How too install, step by step: Go to CodeCat directory, install backend and frontend libs: $ cd Front $ sudo python3 -m pip install -r requirements.txt $ cd .. $ cd Backend $ sudo...

XSS vulnerability in Popojicms frontend co***.php page

PopojiCMS is an open source content management system CMS based on the Popoji framework. Popojicms front co.php page has an XSS vulnerability that can be exploited by attackers to inject arbitrary Web script or HTML...

SQL Injection Vulnerability in the Frontend of Xinxiao Online Marking System

Xinkao Online Marking System is an online marking system for the majority of teachers and friends. Xinkao Online Marking System has a SQL injection vulnerability in the foreground, which can be exploited by attackers to obtain sensitive information from the database...

PHPOK frontend has SQL injection vulnerability

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. PHPOK has a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive information in the database...

XSS vulnerability in X5music V2.0 frontend user folder do.php

X5music Music Management System is a music management system and video management system compiled with php+mysql. X5music V2.0 has an XSS vulnerability in the front user folder do.php, which can be exploited by attackers to obtain cookie information...

X5music Music Management System frontend ne***.php file has SQL injection vulnerability

X5music music management system is a set of open source music products. X5music music management system front ne.php file SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...