UBUNTU-CVE-2019-20379

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php cs parameter...

UBUNTU-CVE-2019-20378

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php ce parameter...

CVE-2019-20378

CVE-2019-20378 affects ganglia-web (Ganglia Web Frontend) up to version 3.7.5, where an XSS bug is exploitable via the header.php ce parameter. Multiple advisories (OSV, SUSE, Nessus plugins) confirm the issue and show a fixed release sequence (3.7.5‑2.1 and related SUSE security updates) that ad...

CVE-2019-20378

ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php ce parameter...

SQL Injection Vulnerability in me***.php file of Yunye CMS frontend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the me.php file in the frontend of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

Logic flaw vulnerability in ejucms frontend Us***.php file

EJU real estate system ejucms is a set of localized O2O real estate website platform system. There is a logic flaw vulnerability in the ejucms front-end Us.php file. Attackers can use the vulnerability to modify any user information...

XSS vulnerability in the frontend of Angel School's training website system

Angel school training website system is an open source website management system. Angel School Training Website System has an XSS vulnerability in the front-end that can be exploited by attackers to execute malicious script code...

OX App Suite 7.10.2 Cross Site Scripting / Improper Access Control

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 67097 Bug ID Vulnerability type: Cross-site scripting CWE-80 Vulnerable version: 7.10.2 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.2-rev14,...

MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure

MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Exploit: MyDomoAtHome REST API Domoticz ISS Gateway 0.2.40 - Information Disclosure Date: 2019-12-30 Author: LiquidWorm Vendor: Emmanuel Product web page: https://github.com/empierre/MyDomoAtHome...

Arbitrary file download vulnerability in Myucms frontend

MyuCMS open source content management system developed using ThinkPHP community mall. MyuCMS front-end arbitrary file download vulnerability , an attacker can exploit the vulnerability to download any file...

SQL injection vulnerability in the frontend fl***.php file of Dascommerce B2B2C multi-user mall system

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. A SQL injection vulnerability exists in the fl.php file of the B2B2C multi-user mall system. An attacker can use the vulnerability to obtain sensitive...

File Upload Vulnerability in ezEIP Frontend of Wando Network Technology Co.

ezEIP is a website management system of Wando Network Technology Co. A file upload vulnerability exists in the frontend of ezEIP of Wando Network Technology Co. Ltd, which can be exploited by an attacker to gain server administrator privileges...

mijnlijstenmakerij.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1048800 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

[SECURITY] Fedora 31 Update: cacti-1.2.8-1.fc31

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

TPshop open source mall file upload vulnerabilities exist in the foreground

TPshop open source mall is developed with the latest version of ThinkPHP shop mall. TPshop open source mall front-end file upload vulnerability. Allow attackers to upload webshell, get server privileges...

Cross-Site Scripting in Link Handling

It has been discovered that t3:// URL handling and typolink functionality are vulnerable to cross-site scripting. Not only regular backend forms are affected but also frontend extensions which use the rendering with typolink...

Privilege Escalation in extension "femanager direct mail subscription" (femanager_dmail_subscribe)

Failing to properly check access rights, the extension is susceptible to privilege escalation, making it possible for a logged in frontend user to modify other frontend user records...

Multiple vulnerabilities in extension "MKSamlAuth" (mksamlauth)

The extension fails to validate the response from the Identity Provider which allows an attacker to create various frontend users on affected TYPO3 websites...

CSRF in extension "Change password for frontend users" (fe_change_pwd)

The extension fails to implement a CSRF protection for update password action...

TuziCMS 2.0.6 SQL injection vulnerability in frontend ho*** us***.cl***.php

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS 2.0.6 front-end ho us.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...