PT-2020-19708 · Umbraco · Umbraco Forms

Name of the Vulnerable Software and Affected Versions: UmbracoForms versions all versions Description: The issue allows uploading arbitrary file types when using the default configuration for upload forms. Users can mitigate this by creating a custom workflow and frontend validation to block...

[SECURITY] Fedora 32 Update: cacti-1.2.13-1.fc32

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

Stored cross-site scripting vulnerability in hybbs frontend fr***.js file

hybbs is a PHP web program that supports plugin extensions and template extensions. A stored cross-site scripting vulnerability exists in the frontend fr.js file of hybbs. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

SQL Injection Vulnerability in kkcms Frontend

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms front-end SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information i...

Command execution vulnerability in PbootCMS frontend Pa***.php file

PbootCMS is an open source free PHP enterprise web development and construction management system. PbootCMS front Pa.php file has a command execution vulnerability. An attacker can exploit the vulnerability to execute arbitrary code...

CVE-2020-15307

Nozomi Guardian before 19.0.4 allows attackers to achieve stored XSS in the web front end by leveraging the ability to create a custom field with a crafted field name...

SQL Injection Vulnerability in the Frontend of waychar Enrollment System

Waychar Enrollment System is a PHP/MYSQL based enrollment system. A SQL injection vulnerability exists in the frontend of waychar enrollment system. An attacker can exploit this vulnerability to obtain sensitive information from the database...

Stored Cross-Site Scripting Vulnerability in Dum Dum CMS Frontend

Clumsy CMS is developed using PHP5+MYSQL as the technical base, the system is scalable and fully open source. A stored cross-site scripting vulnerability exists in the frontend of Dum Dum CMS. Attackers can use the vulnerability to obtain the administrator cookie...

CVE-2020-7671

goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to b...

Design/Logic Flaw

goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to b...

[SECURITY] Fedora 31 Update: cacti-1.2.12-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

Project iKy v2.6.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface

Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...

SQL Injection Vulnerability in Xionghai CMS Frontend

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information from the...

Code Execution Vulnerability in Ear Distribution Frontend

Ear Distribution is a content management system. A code execution vulnerability exists in the frontend of Ear Distribution. An attacker could gain server privileges by constructing malicious code...

Multiple Storage-based Cross-site Scripting Vulnerabilities in DM Building System Frontend

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM building system front-end exists in a number of storage-based cross-site scripting vulnerabilities. Attackers can exploit the vulnerability to obta...

Stored Cross-site Scripting Vulnerability in the Frontend of Guojiz Web Site Navigation System

Guojiz website navigation system is a navigation website source code developed by PHP+MySQL. A stored cross-site scripting vulnerability exists in the frontend of the Guojiz web navigation system. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in the Frontend of Tuan ah VIP Movie System

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A XSS vulnerability exists in the frontend of Tuan Ah VIP Movie System. An attacker can exploit this vulnerability to obtain user cookie information...

XSS Vulnerability in Extreme CMS Frontend

Extreme CMS is a website building system. An XSS vulnerability exists in the frontend of Extreme CMS, which can be exploited by attackers to obtain user cookie information...

WP Frontend Profile < 1.2.2 - CSRF Check Incorrectly Implemented

The WP Frontend Profile WordPress plugin did not verify the Cross-Site Request Forgery CSRF nonce correctly...

WordPress WP Frontend Profile plugin <= 1.2.1 - Nonce Security Issue vulnerability

Nonce Security Issue vulnerability discovered by Julio Potier in WordPress WP Frontend Profile plugin versions = 1.2.1. Solution Update the WordPress WP Frontend Profile plugin to the latest available version at least 1.2.2...