5743 matches found
File upload vulnerability in kjcms frontend
kjcms is an internet and mobile internet based food ordering service reservation system. A file upload vulnerability exists in the kjcms frontend. The vulnerability is caused due to the upload file type and suffix can be controlled by the user, allowing an attacker to upload a webshell and gain...
File upload vulnerability in ask2 Q&A frontend
ask2 Q&A is an open source PHP Q&A program. A file upload vulnerability exists in the frontend of ask2 Q&A System. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
SQL Injection Vulnerability in DuomiCms x3.0 Frontend
DuomiCms is a video-on-demand system designed for film and television station owners. SQL injection vulnerability exists in DuomiCms x3.0 frontend. An attacker can exploit the vulnerability to obtain sensitive database information...
ask2 Q&A system front user.php file exists arbitrary user password change vulnerability
ask2 Q&A is an open source PHP Q&A program. There is an arbitrary user password change vulnerability in the ask2 Q&A System frontend user.php file. An attacker can exploit the vulnerability to directly modify the password of the administrator user...
DuomiCms x3.0 frontend duomiphp/ajax.php file has SQL injection vulnerability
DuomiCms is a video-on-demand system designed for film and television station owners. DuomiCms x3.0 frontend duomiphp/ajax.php file has SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
Cross-Site Scripting Vulnerability in EasySNS V1.6 Frontend
ESPHP development framework based on the development of EasySNS minimalist community for the new database architecture and program structure.ESPHP is a self-developed set of PHP source code framework. EasySNS V1.6 in the program implementation of cross-site scripting vulnerabilities, attackers ca...
EduaskCMS v1.0.7 Cross-site Scripting Vulnerability in Frontend
EduaskCMS is a free and open source content management system based on ThinkPHP 5.0.14+layui2.2.5 framework. EduaskCMS v1.0.7 frontend has a cross-site scripting vulnerability in the program implementation, the vulnerability is due to the system fails to adequately filter the incoming parameters...
[SECURITY] Fedora 27 Update: irssi-1.0.7-1.fc27
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
[SECURITY] Fedora 26 Update: irssi-1.0.7-1.fc26
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
Joomla! Component CheckList 1.1.1 - SQL Injection
Exploit Title: Joomla! Component CheckList 1.1.1 - SQL Injection Dork: N/A Date: 22.02.2018 Vendor Homepage: https://www.joomplace.com/ Software Link: https://extensions.joomla.org/extensions/extension/living/personal-life/checklist/ Version: 1.1.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx6...
Reflective Cross-site Scripting Vulnerability in YUNUCMS v1.0.6 Frontend
YUNUCMS is a three-network, open source content management system with its own substation system. A reflective cross-site scripting vulnerability exists in the frontend of YUNUCMS v1.0.6. The attacker constructs XSS statements and performs pop-up box operations to obtain user cookies and other...
The vulnerability of the dvb_frontend_free function (drivers/media/dvb-core/dvb_frontend.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.
The vulnerability of the dvbfrontendfree function located in the drivers/media/dvb-core/dvbfrontend.c file in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker, operating locally, to cause service failures or other effects...
[SECURITY] Fedora 26 Update: irssi-1.0.6-1.fc26
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
WordPress ACF Frontend Display File Upload
File upload vulnerability in WordPress ACF Frontend Display plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
[SECURITY] Fedora 25 Update: cacti-1.1.28-1.fc25
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...
Open Ticket Request System Agent Frontend Information Disclosure Vulnerability
Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and service personn...
UBUNTU-CVE-2017-15864
In the Agent Frontend in Open Ticket Request System OTRS 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password...
