4545 matches found
Sitadel - Web Application Security Scanner
Sitadel is basically an update for WAScan making it compatible for python = 3.4 It allows more flexibility for you to write new modules and implement new features : Frontend framework detection Content Delivery Network detection Define Risk Level to allow for scans Plugin system Docker image...
WUZHI CMS v4.1.0 SQL Injection Vulnerability in Frontend sm***_ch***.php File
WUZHI CMS is Beijing five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. WUZHI CMS v4.1.0 SQL injection vulnerability exists in the front smch.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
Base Soundtouch 18.1.4 Cross Site Scripting
CWE-80 XSS Bose Soundtouch App Internal reference: - Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 18.1.4 and maybe older versions, too not tested Vulnerable component: IOS Frontend of the application Report confidence: Unconfirmed Solution status: Could be fixed by vendor?...
WeiPHP 5.0beta frontend has an override access vulnerability
WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP5.0beta front-end has an override access vulnerability. The vulnerability stems from the user operation does not verify the identity, the attacker can...
WeiPHP 5.0beta frontend Us***.php has SQL injection vulnerability
WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. A SQL injection vulnerability exists in WeiPHP 5.0beta frontend at Us.php. Attackers can use this vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in the Frontend Bi***.ashx Page of eDoc, an Electronic Document Repository
Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic Document Library eDoc front Bi.ashx page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...
SQL Injection Vulnerability in File System Profile Frontend ge***.aspx Page
The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the front-end ge.aspx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in eDoc frontend ge***.aspx page of electronic document repository (CNVD-2019-01496)
Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc front ge.aspx page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...
SQL Injection Vulnerability in Purchase Frontend ge***.aspx Page of Purchase System
Purchase system Purchase is a purchasing management system features include: product requisitioning, warehousing, inventory counts, data reports and more. A SQL injection vulnerability exists in the front-end ge.aspx page of Purchase, which can be exploited by attackers to obtain sensitive...
Arbitrary File Download Vulnerability in eDoc Frontend of Electronic Document Library
Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc foreground exists arbitrary file download vulnerability, attackers can use the vulnerability to obtain sensitive documents...
SQL Injection Vulnerability in File System Profile Frontend Bi***.ashx Page
The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the frontend Bi.ashx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2018-20370
SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...
CVE-2018-20370
SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend...
CVE-2018-20370
SZ NetChat before 7.9 is vulnerable to Cross-Site Scripting in the Options module (MyName input). The root cause is an XSS flaw in the MyName field, allowing a remote attacker to inject inputs that could compromise the enabled HTTP server web frontend. The public references consistently describe ...
What happens when packages go bad?
I built spritecow.com back in 2011, and I no longer actively maintain it. A few months ago, a user berated me for using a crypto currency miner on the site without their informed consent. And sure enough, the site's JS had a small addition that loaded the mining JS, and sent the result somewhere...
Code Execution Vulnerability in Frontend of zzzcms V1.5.8 Official Version
zzcms is a free and open source building system, mainly facing the majority of webmasters use. zzzcms V1.5.8 official version of the foreground there is a code execution vulnerability, an attacker can use the vulnerability to obtain control of the web server...
Code Execution Vulnerability in FeiFeiCms Frontend
FeiFeiCms is developed with PHP+Mysql technology and can run on windows and Linux system platform. FeiFeiCms code execution vulnerability exists in the front-end, an attacker can exploit the vulnerability to obtain control of the web server...
CVE-2018-2502
CVE-2018-2502 affects SAP Business One Service Layer (B1_ON_HANA) with TRACE method enabled, enabling potential Cross Site Tracing (XST) when frontend applications expose an XSS vulnerability. The connected documents specify the vulnerable component as SAP Business One Service Layer and reference...
