CVE-2019-9145: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page...

SQL Injection Vulnerability in Hsycms V1.1 co***.php Page

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. A SQL injection vulnerability exists in the co.php page of Hsycms V1.1, which can be exploited by attackers to obtain sensitive...

Hsycms V1.1 has xss vulnerability

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. An xss vulnerability exists in Hsycms V1.1, which stems from a failure to filter user-submitted data and can be exploited by an...