EUVD-2019-20071

News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive...

YUNUCMS cross-site scripting vulnerability (CNVD-2019-00564)

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS1.1.8 version of the app/index/controller/Show.php file there is a cross-site scripting vulnerability, a remote attacker can send the 'cw' parameter to...

CVE-2019-5311

An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter...

DEW-NEWphpLinks 2.0 XSS / LFI

------------------------------------------------------------------------------------------------ DEW-NEWphpLinks 2.0 LFI/XSS Multiple Remote Vulnerabilities http://www.dew-code.com ----------------------------------------------------------------------------------------------- Bug founded by d3v1l...