XSS Vulnerability in JC Retail Management Information System JC RMIS Frontend

Ongie is an innovative enterprise that provides fully integrated information system solutions and cloud services for retail enterprises with software development as its core, and is a full-service, integrated solution provider for the retail industry in China. JC Retail Management Information...

SQL Injection Vulnerability in JC Retail Management Information System JC RMIS Frontend

Ongie is an innovative enterprise that provides fully integrated information system solutions and cloud services for retail enterprises with software development as its core, and is a full-service, integrated solution provider for the retail industry in China. A SQL injection vulnerability exists...

File Upload Vulnerability in Suntang Information Technology Laboratory Integrated Management System V6.0 Frontend

Suntang University Laboratory Resource Sharing Platform helps universities to establish a collaborative mechanism for resource sharing and laboratory opening, and provides a platform for resource allocation integration and teamwork for scientific research and innovation. A file upload vulnerabili...

SQL Injection Vulnerability in the Frontend of Laboratory Integrated Management System of Hunan Santang Information Technology Co.

Hunan Suntang Information Technology Co., Ltd. takes IT operation and maintenance integration platform and IT operation and maintenance service sharing platform as the core, and builds "Internet of Things" type IT integration operation and maintenance platform with the business system supplemente...

Arbitrary Password Reset Vulnerability in the Frontend of Laboratory Integrated Management System of Hunan Suntang Information Technology Co.

Hunan Suntang Information Technology Co., Ltd. takes IT operation and maintenance integration platform and IT operation and maintenance service sharing platform as the core, and builds "Internet of Things" type IT integration operation and maintenance platform with the business system supplemente...

CVE-2019-15953

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertica...

SQL Injection Vulnerability in YouDianCMS Frontend Cu***.cl***.php File

YouDianCMS is an enterprise website management system developed by Changsha YouDian Software Technology Co. A SQL injection vulnerability exists in the Cu.cl.php file in the frontend of YouDianCMS. An attacker can use the vulnerability to obtain sensitive information from the database...

XXE Injection Vulnerability in UsualToolCMS Frontend

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. An XXE injection vulnerability exists in the frontend of UsualToolCMS. An attacker can exploit the vulnerability to remotely read arbitrary files on the server...

SQL Injection Vulnerability in the Frontend of Tongda OA System of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

Unauthorized Access Vulnerability in the Frontend of Smartstone Online Training and Learning System of Shijiazhuang Lingstone Technology Co.

Smartstone Online Training and Learning System is an online learning platform that integrates both passive training and active learning modes and supports multi-level authorization management. There is an unauthorized access vulnerability in the frontend of Smartstone Online Training and Learning...

Quantopian: Cross-site scripting via hardcoded front-end watched expression.

Hello, favorite security team. This is so far most interesting XSS i've found on your website. And also this is 10th bug i report you, so im gonna celebrate. Summary: Via hardcoded front-end code in algo debugger one is able to execute XSS on algorithm collaborator. One is able to use python to...

UBUNTU-CVE-2019-15767

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmdload function in frontend/cmd.cc via a crafted chess position in an EPD file...

XSS Vulnerability at ZMCMS Frontend Application Information

ZMCMS is a website construction system of Sichuan Zhimeng Technology Co. An XSS vulnerability exists in the ZMCMS front-end application data, which can be exploited by attackers to obtain sensitive information...

GNU Chess Stack Buffer Overflow Vulnerability

GNU Chess is a chess game program. A stack buffer overflow vulnerability exists in the cmdload function in frontend/cmd.cc in GNU Chess 6.2.5. An attacker can exploit this vulnerability to cause a stack buffer overflow via a specially crafted chess position in an EPD file...

ceph: Unauthenticated clients can crash ceph RGW configured with beast as frontend

A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients...

S-CMS Enterprise Website Builder System SQL Injection Vulnerability in Frontend

S-CMS Enterprise Station System is a mature and perfect enterprise station CMS system. S-CMS Enterprise Station System has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain database information...

SQL Injection Vulnerability in the Frontend of S-CMS Enterprise Website Building System (CNVD-2019-30292)

S-CMS Enterprise Station System is a mature and perfect enterprise station CMS system. S-CMS Enterprise Station System has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain database information...

Open-Xchange OX App Suite Content Spoofing / Cross Site Scripting

Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs appsuite, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product: OX...

Debian: Security Advisory (DLA-1876-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Information leakage vulnerability in the frontend of Yiqin General Attendance Management System V6.0

Beijing Yiqin Information Technology Co., Ltd. focuses on the research of labor force attendance and working hour solutions, and creates the Yiqin labor power and working hour management platform. Information leakage vulnerability exists in the frontend of Yiqin General Attendance Management Syst...