Information leakage vulnerability in the frontend of Yiqin General Attendance Management System V6.0

Easy attendance general attendance management system is researched and developed by Beijing Jinmapu Technology Development Co., Ltd. The system is based on B/S architecture and developed by VS.NET+SQLSERVER, which can complete the information browsing and information processing in the attendance...

SQL Injection Vulnerability in Yunye CMS Frontend

Yunye cms enterprise building system is developed by php + mysql a set of open source cms dedicated to small and medium-sized enterprise website construction. Yunye CMS front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Xingyunhai CMS Frontend

Xingyunhai CMS is a completely open source CMS content management system. Xingyunhai CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Backup File Download Vulnerability in UKcms Frontend

UKcms is a PHP-based content management system CMS by China Lingji Network Technology. A backup file download vulnerability exists in the frontend of UKcms. Under unauthorized circumstances, an attacker can exploit the vulnerability to construct links to directly download SQL backup information...

Stored Cross-site Scripting Vulnerability in Xionghai CMS Frontend Message Board Comments

Xionghai CMS is a set of comprehensive website management system that can be widely used in personal blogs, personal websites and corporate websites. Applicable to personal blogs, personal websites, corporate websites and other various purposes, the front end of the computer, mobile two display...

CVE-2010-3674

TYPO3 before 4.4.1 allows XSS in the frontend search box...

Design/Logic Flaw

TYPO3 before 4.4.1 allows XSS in the frontend search box...

CVE-2010-3674

TYPO3 before 4.4.1 allows XSS in the frontend search box...

CVE-2010-3674

TYPO3 (CMS/CMF) versions before 4.4.1 are affected by a cross-site scripting (XSS) vulnerability in the frontend search box. The issue arises from lack of proper validation of client-side data, enabling an attacker to inject scripts that run in a user’s browser. The available connected sources co...

CVE-2010-3674

TYPO3 before 4.4.1 allows XSS in the frontend search box...

CVE-2010-3669

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

CVE-2010-3669

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

Design/Logic Flaw

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

CVE-2010-3669

TYPO3 vulnerability CVE-2010-3669 affects frontend login box. Affects TYPO3 core/frontend login in versions: < 4.2.13, < 4.3.4 (4.3.x), and

CVE-2010-3669

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box...

SQL Injection Vulnerability in seacms Frontend

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the frontend of seacms, which can be exploited by attackers to obtain database sensitive information...

SQL Injection Vulnerability in ZZCMS Frontend

ZZCMS is a content management system for Merchants Network. A SQL injection vulnerability exists in the frontend of ZZCMS. An attacker can exploit this vulnerability to obtain sensitive information from the database...

CVE-2019-16698

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...

Design/Logic Flaw

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...

CVE-2019-16698

The CVE-2019-16698 issue affects the TYPO3 Direct Mail extension (direct_mail) up to version 5.2.2. A missing access check in the backend module allows a user with restricted permissions (to fe_users) to view and export data of frontend newsletter subscribers. The condition is an information-disc...