4547 matches found
[SECURITY] Fedora 31 Update: cacti-1.2.10-1.fc31
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...
Design/Logic Flaw
Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...
Login Bypass Vulnerability in LaySNS
LaySNS is a lightweight integrated site building system. LaySNS suffers from a login bypass vulnerability, which can be exploited by an attacker to forge the identity of any frontend user to login...
HackerOne: Mismatch between frontend and backend validation via `ban_researcher` leads to H1 support and hackers email spam
Summary: We found a mismatch between the frontend and backend validation when using the ban researcher feature, available for program customer. Description: When a program customer issues a ban, an automatic email will be send both to the banned user and H1 support. The problem is that fronted wi...
Command Execution Vulnerability in eyoucms Frontend
Eyoucms is based on TP5.0 framework for the core development of free + open source enterprise content management system . Children's foreign trade responsive English website template comes with eyoucms core. eyoucms front-end command execution vulnerability , attackers can use the vulnerability t...
Logic Flaw Vulnerability in JEECG-BOOT System of Beijing Guo Torch Information Technology Co.
Jeecg-Boot is a code generator based rapid development platform that can be used to develop backend management systems such as ERP, CRM and applets. A logic flaw exists in the JEECG-BOOT system of Beijing Guo Torch Information Technology Co., Ltd, which can be exploited by an attacker to modify t...
Arbitrary file upload vulnerability in the al***.cl***.php page of the frontend of UQCMS cloud business system
UQCMS cloud business system is the program using PHP + MYSQL template using smarty template, front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system front al.cl.php page exists arbitrary file upload vulnerability. An attacker can exploit the vulnerability to...
[SECURITY] Fedora 30 Update: cacti-1.2.9-1.fc30
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...
SQL injection vulnerability in the frontend of the Ship 100 virtual goods auto-shipment system
Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Shipping 100 virtual goods autoship system SQL injection vulnerability exists in the foreground, an attacker can exploit the vulnerability to obtain database sensitive information...
Logic flaw vulnerability in the uc***.php file in the frontend of Five Fingers CMS
Five Fingers CMS is an open source content management system. A logic flaw vulnerability exists in the uc.php file in the frontend of Five Fingers CMS. Attackers can use the vulnerability to log in to any user , access sensitive information , to perform unauthorized operations...
CVE-2020-1768
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...
CVE-2020-1768
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...
UBUNTU-CVE-2020-1768
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...
PT-2020-5625 · Red Hat +3 · Ceph +3
Name of the Vulnerable Software and Affected Versions: Ceph affected versions not specified Description: A flaw in the Ceph RGW Beast front-end's handling of unexpected disconnects allows an authenticated attacker to make multiple disconnect attempts, resulting in a permanent leak of a socket...
ShopsN suffers from a SQL injection vulnerability
ShopsN is a full-featured free commercial use of open-source online store in line with enterprise-class commercial standards under the Shanghai Yisou Network Technology Co. ShopsN has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain sensitive informatio...
ai.ylyue:yue-library-auth-client (>=j8.2.3.0 <=j11.2.3.3), ai.ylyue:yue-library-auth-service (>=j8.2.3.0 <=j11.2.3.3) +3893 more potentially affected by CVE-2020-5397 via org.springframework:spring-webmvc (>=5.2.0.RELEASE <=5.2.2.RELEASE)
org.springframework:spring-webmvc MAVEN version =5.2.0.RELEASE, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =2.3.0.RELEASE, =1.1.1, =1.0.0, =1.2.2.RELEASE, =1.2.2.RELEASE, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.12 and more Source cves: CVE-2020-5397 Source advisory: OSV:GHSA-7PM4-G2QJ-J85X...
CVE-2019-20378
ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php ce parameter...
DEBIAN-CVE-2019-20378
ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php ce parameter...