zzzcms V1.5.7 php official version of the foreground in***.php page SQL injection vulnerability

zzcms is a free and open source building system, mainly facing the majority of webmasters to use. zzzcms V1.5.7 php official version of the foreground in.php page there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

File upload vulnerability in PHPOK frontend us***.php file

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in the us.php file in the frontend of PHPOK. Allows attackers to upload webshell and gain server privileges...

WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting

======================================================================================== Custom Frontend Login Registration Form v1.01 WP Plugin - Multiple XSS Vulnerabilities ======================================================================================== Exploit Title: Custom Frontend...

WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ======================================================================================== Custom Frontend Login Registration Form v1.01 WP Plugin - Multiple XSS Vulnerabilities...

Buddyforms < 2.2.8 - SQL Injection

The Contact – Registration – Post Form Builder & FrontEnd Editor BuddyForms – Making WordPress Forms A Breeze WordPress plugin was affected by a SQL Injection security vulnerability...

File Upload Vulnerability in the Frontend of Online Training System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A file upload vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co., Ltd. that can be exploited by an...

PHP7CMS frontend Se***.php file has SQL injection vulnerability

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. PHP7CMS foreground Se.php file exists SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Th***.php file of PawnBuilder CMS Frontend

SmallBuild CMS is a website management backend based on the OneThink open source framework. There is a SQL injection vulnerability in the Th.php file in the frontend of PawnBuilder CMS. Attackers can use the vulnerability to obtain database sensitive information...

apex-frontend-boost (>=3.1.0 <=3.1.4), apex-nitro (>=4.0.0 <=4.0.0-beta.5) potentially affected by CVE-2018-16462 via apex-publish-static-files (=1.0.8)

apex-publish-static-files NPM version =1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on apex-publish-static-files and may be impacted: - apex-frontend-boost =3.1.0, =4.0.0, =4.0.0-beta.5 Source cves: CVE-2018-16462 Source advisory:...

kernel: Use-after-free in drivers/media/dvb-core/dvb_frontend.c

The dvb frontend management subsystem in the Linux kernel contains a use-after-free which can allow a malicious user to write to memory that may be assigned to another kernel structure. This could create memory corruption, panic, or possibly other side affects...

Arbitrary File Deletion Vulnerability in ZZCMS 2018 Version Frontend

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. An arbitrary file deletion vulnerability exists in the frontend of ZZCMS 2018 version. An attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary file deletion vulnerability in ZZCMS 2018 version frontend (CNVD-2018-23353)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. An arbitrary file deletion vulnerability exists in the frontend of ZZCMS 2018 version. An attacker can exploit the vulnerability to delete arbitrary files...

SQL Injection Vulnerability in the Frontend of Online Learning System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A SQL injection vulnerability exists in the frontend of the online learning system of Beijing Xinqi Technology Co. An attacker can exploit the...

Code Execution Vulnerability in PHP7CMS Frontend

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. PHP7CMS code execution vulnerability exists in the foreground. Attackers can take advantage of the vulnerability without permission to invoke the function to...

Code Execution Vulnerability in PHP7CMS Frontend

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. A code execution vulnerability exists in the frontend of PHP7CMS. The vulnerability is due to the IP header of PHP7CMS is written to the log file without being...

Vulnerabilities in the Frontend of IM-Learning Intelligent Learning Management System of Guangyi Orient

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. An override access vulnerability exists in the frontend of the Guangyi Orient IM-Learning Intelligent Learning Management System, which can be exploited by an...

FeiFeiCms 4.0.181010 version of the foreground there are logic flaws vulnerability

FeiFeiCms is developed by PHP+Mysql technology and can run on windows and Linux system platform. A logic flaw exists in the frontend of FeiFeiCms version 4.0.181010, which stems from a failure to properly filter user input and can be exploited by an attacker to modify user information...

Duomicms x3.0_UTF8_Official version of the front-end SQL injection vulnerability

DuomiCms is a video-on-demand system designed for movie and TV station owners. Duomicms x3.0UTF8official version of the front end of the vi.php file there is a SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

Beijing Xinqi Technology Co., Ltd. online training system has an override access vulnerability in the frontend

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co. An attacker can exploit the vulnerability to log ...

SQL Injection Vulnerability in the Frontend of Online Training System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A SQL injection vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co. An attacker can exploit the...