SQL Injection Vulnerability in Frontend of GPS Intelligent Monitoring Management System of Henan Starcom

Henan Starcom Information Technology Co., Ltd. is a specialized company engaged in GPS global positioning operation services. SQL injection vulnerability exists in the front-end of the GPS Intelligent Monitoring Management System of Henan Xingtong, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in the Frontend of DaQuanZhouAuto.com

It is an automobile network platform that provides Quanzhou automobile, Quanzhou automobile information, Quanzhou new car, Quanzhou used car and other services. SQL injection vulnerability exists in the front-end of DaQuanZhouAuto.com, the vulnerability stems from the failure to filter the pagenu...

Arbitrary File Upload Vulnerability in the Frontend of Bizlaw eCom Information Management Software

Bizlawyer eTongue information management software is based on standardized management, the use of larger law firms needs to develop a comprehensive set of management software. There is an arbitrary file upload vulnerability in the front-end of Bizlawyer eTalk Information Management Software. An...

SQL Injection Vulnerability in Frontend of IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. A SQL injection vulnerability exists in the frontend of the IM-Learning Intelligent Learning Management System in Guangyi East. An attacker can exploit this...

Cross-Site Scripting in extension "Frontend Treeview" (mh_treeview)

The extension fails to properly encode user input for output in HTML context...

PbootCMS V1.1.8-20180807 SQL Injection Vulnerability in Frontend

PbootCMS is an open source PHP enterprise web development and construction management system. PbootCMS V1.1.8-20180807 SQL injection vulnerability exists in the front-end , the vulnerability stems from the front-end does not limit the input information , the attacker can use the vulnerability to...

SQL Injection Vulnerability in the Frontend of Rongguang Information Ordering and Consumption System (荣光信息订取餐消费系统前台存在SQL注入漏洞)

Rongguang Information Ordering and Picking Up Food Consumption System is a multi-functional ordering system developed by Shenzhen Rongguang Information Co. SQL injection vulnerability exists in the frontend of Rongguang Information Ordering and Consumption System, which can be exploited by...

Debian DSA-4263-1 : cgit - security update

Jann Horn discovered a directory traversal vulnerability in cgit, a fast web frontend for git repositories written in C. A remote attacker can take advantage of this flaw to retrieve arbitrary files via a specially crafted request, when 'enable-http-clone=1' default is not turned off. C Tenable...

SQL Injection Vulnerability in the Frontend of Bureau Veritas Law Firm's Integrated Information Management Software

Bizhi law firms comprehensive information management software is Bizhi law firms for the use of the demand for a comprehensive set of specially developed management software. SQL injection vulnerability exists in the frontend of Bizlaw Firm Information Management Software. An attacker can use the...

SQL Injection Vulnerability in Frontend of Sunny eDrive Reservation Management System

Jiangsu Gangcheng Automobile Transportation Group is a provincial group mainly engaged in road transportation and related industries. A SQL injection vulnerability exists in the frontend of the Sunny eDrive reservation management system. An attacker can exploit the vulnerability to obtain sensiti...

PbootCMS V1.1.6-20180721 Code Execution Vulnerability in the Frontend

PbootCMS is an open source PHP enterprise web development and construction management system. A code execution vulnerability exists in the frontend of PbootCMS version V1.1.6-20180721, which can be exploited by an attacker to execute remote code...

PT-2018-18334

Name of the Vulnerable Software and Affected Versions: Huawei mobile phone versions prior to 8.0.0.145C432 Description: The issue is related to a denial of service DoS problem due to the device's inability to handle specific screen gestures. This could allow an attacker to trick users into...

scopegujarat.org XSS vulnerability

Open Bug Bounty ID: OBB-656253 Description| Value ---|--- Affected Website:| scopegujarat.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHPEMS Online Practice Exam System Version 5.0 Logic Flaw Vulnerability in Frontend

PHPEMS online mock exam system is developed based on PHP+Mysql, it is a PHP online mock exam system that supports multiple question types and presentation methods. PHPEMS online mock exam system version 5.0 there is a logic flaw vulnerability in the foreground, attackers can use the vulnerability...

NiuShop B2B2C Multi-merchant Mall System File Upload Vulnerability in Frontend

NiuShop B2B2C Multi-Merchant Mall System is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2B2C Multi-commerce Mall System has a file upload vulnerability in the frontend. An attacker can gain control of the...

[20180802] - Core - Stored XSS vulnerability in the frontend profile

Inadequate output filtering on the user profile page could lead to a stored XSS attack...

Faraday Beta v3.0 - Collaborative Penetration Test and Vulnerability Management Platform

This new version has made major architectural changes to adapt the software to the new challenges of cybersecurity. It focuses on processing large volumes of data and facilitating user interaction with Faraday in their environment. Faraday just got much faster Architecture changes and a new...

Mquery - YARA Malware Query Accelerator (Web Frontend)

Ever had trouble searching for particular malware samples? This project is an analyst-friendly web GUI to look through your digital warehouse. mquery can be used to search through terabytes of malware in a blink of an eye: Thanks to the UrsaDB database, queries on large datasets can be extremely...

Code execution vulnerability in weiphp 2.0 frontend

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. A code execution vulnerability exists in the weiphp 2.0 frontend platform, which can be exploited by attackers to execute code and thus gain control of the server...

Arbitrary File Read Vulnerability in weiphp 2.0 System Frontend

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. An arbitrary file read vulnerability exists in the weiphp 2.0 frontend. A remote attacker can exploit this vulnerability to read arbitrary files in the system...