SQL Injection Vulnerability in Hsycms Frontend

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Hsycms suffers from a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive...

Directory traversal in development mode handler in Vaadin 14 and 15-17

Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 Vaadin 14.0.0 through 14.4.2, and 3.0 prior to 5.0 Vaadin 15 prior to 18 allows attacker to request arbitrary files stored outside of intended frontend resources folder. See CWE-20: Improper...

Command Execution Vulnerability in ZZCMS 2020 Frontend

ZZCMS is a content management system. A command execution vulnerability exists in the ZZCMS 2020 frontend, which can be exploited by an attacker to gain control of the server...

CVE-2020-28917

An issue was discovered in the viewstatistics aka View frontend statistics extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending on the extensions used on a TYPO3 website, sensitive data e.g., cleartext passwords if ext:felogin is...

Sensitive Data Exposure in extension "View frontend statistics" (view_statistics)

The extension saves all GET and POST data of TYPO3 frontend requests to the database. Depending on the extensions used on a TYPO3 website, sensitive data e.g. plain text passwords if ext:felogin is installed may be saved...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend re***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend sh***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

OSV-2020-2131 Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26997 Crash type: Stack-use-after-return READ 8 Crash state: solidity::smtutil::CHCSmtLib2Interface::querySolver solidity::smtutil::CHCSmtLib2Interface::query solidity::frontend::CHC::query...

squid: HTTP Request Splitting issue in HTTP message processing

An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches between a client and Squid with attacker-controlle...

SQL Injection Vulnerability in FangfaCms

Method Digital Web Content Management System FangfaCms is an enterprise-level PHPCMS website management system. A SQL injection vulnerability exists in the frontend Fl.cls.php of FangfaCms. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in CMS Frontend

Situ CMS is the short name of Situ Tourism Website Management System, which is a self-developed website management system applicable to the construction of tourism websites. A SQL injection vulnerability exists in the frontend of SITO CMS. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in TuziCMS Frontend

TuziCMS TC for short is an enterprise web content management system based on PHP+MySql. There is a SQL injection vulnerability in the MS frontend. An attacker can exploit the vulnerability to obtain sensitive database information...

XSS Vulnerability in CUPCMS v5.0 Frontend

CUPCMS v5.0 cup content management system integrates video, stars, news, comics, community and more. An XSS vulnerability exists in the frontend of CUPCMS v5.0, which can be exploited by attackers to obtain sensitive information from user cookies...

Stored XSS Vulnerability in ForestBlog Frontend

ForestBlog is a simple SSM blogging system. A stored XSS vulnerability exists in the ForestBlog frontend that can be exploited by an attacker to obtain an administrator cookie...

Command Execution Vulnerability in Frontend of Shining Enterprise Website Builder System

Zibo Shining Network Technology Co., Ltd. in November 2014, the company's business scope includes: computer software, hardware development and sales, Internet technology development, technical services and so on. Shining enterprise website building system foreground there is a command execution...

[20210307] - Core - ACL violation within com_content frontend editing

Incorrect ACL checks could allow unauthorized change of the category for an article...

HTTP Request Smuggling in Agoo

agoo through 2.12.3 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be...

SQL Injection Vulnerability in ZZCMS Frontend (CNVD-2020-59408)

ZZCMS is a content management system. A SQL injection vulnerability exists in the frontend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in YYcms Frontend Login Page

YYCMS movie and television, rain rain CMS movie and television, is a fully automatic collection of video sites. YYcms foreground login page exists SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Shield Spirit Original Article Submission System 1.0 SQL Injection Vulnerability in Frontend

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 suffers from a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information from the database...