Arbitrary User Login Vulnerability in Tongda OA Frontend

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Weiphp 5.0 beta frontend Ma***.php page has XSS vulnerability

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the Weiphp 5.0 beta frontend Ma.php page. An attacker can use this vulnerability to insert malicious js code to obtain user...

XSS vulnerability in Weiphp 5.0 frontend Au***.php page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the Weiphp 5.0 frontend Au.php page, which can be exploited by attackers to obtain an administrator cookie...

SQL Injection Vulnerability in kkcms frontend re***.php file

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms front re.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive...

Code execution vulnerability in zzcmsV1.7.5 frontend

zzcms is a free website builder developed in asp language. A code execution vulnerability exists in the frontend of zzzcmsV1.7.5, which can be exploited by attackers to launch RCE attacks...

SQL Injection Vulnerability in kkcms frontend re***.php file

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms front re.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Extreme CMS Frontend (CNVD-2020-26828)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Pinger 1.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Title: Pinger 1.0 - Remote Code Execution Author: Milad Karimi Vendor Homepage: https://github.com/wcchandler/pinger Software Link: https://github.com/wcchandler/pinger Tested on: windows 10 , firefox Version: 1.0 CVE : N/A...

[SECURITY] Fedora 31 Update: cacti-1.2.11-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

CVE-2017-16648

The dvb frontend management subsystem in the Linux kernel contains a use-after-free which can allow a malicious user to write to memory that may be assigned to another kernel structure. This could create memory corruption, panic, or possibly other side affects...

Project iKy v2.4.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface

Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...

SQL Injection Vulnerability in Heybbs Frontend us***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs front us.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Heybbs Frontend lo***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs front lo.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

XSS vulnerability in 115CMS frontend

115CMS is an open source content management system developed with ThinkPHP framework. 115CMS has an XSS vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information such as user cookies...

Web exhibition PHP foreign trade enterprise website red style front SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. SQL injection vulnerability exists in the red style frontend of Nethub's PHP foreign trade enterprise website, which can be exploited by attackers to obta...

SQL Injection Vulnerability in Frontend of zzcms Website Building System

zzcms is a free website builder, featuring easy-to-use labels, a secure system core, and a good user experience. There is a SQL injection vulnerability in the frontend of zzcms, which can be exploited by attackers to obtain sensitive database information...

CVE-2020-10243

An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype...

PT-2020-11999 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.16 Description: The issue is related to a SQL injection vulnerability due to the lack of type casting of a variable in a SQL statement. This vulnerability affects the Featured Articles frontend menutype...

SQL Injection Vulnerability in EjuCMS Frontend of Hainan Eju Technology Co.

Eju real estate system EjuCMS is a set of localized O2O real estate website platform system, users can quickly find their own suitable real estate, real estate agents to promote their own exclusive sale of properties and so on. Ltd. EjuCMS front-end SQL injection vulnerability, attackers can use...

@instacarro/ic-model-admin (>=2.0.5 <=2.0.8), grommet-toolbox (>=0.1.3 <=0.2.12) +4 more potentially affected by CVE-2020-7605 via gulp-tape (>=0.0.10 <=1.0.0)

gulp-tape NPM version =0.0.10, =2.0.5, =0.1.3, =0.1.1, =0.1.5, =0.43.2 - sp-router-js =1.0.1 Source cves: CVE-2020-7605 Source advisory: SNYK:JS-GULPTAPE-560124...