CVE-2022-22358

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 220651...

FoosunCMS SQL Injection Vulnerability

FoosunCMS is a content management software based on ASP+ACCESS/MSSQ architecture. FoosunCMS version 1.0 to 2.0 has a SQL injection vulnerability, because the system does not filter the CityId parameter. Allow attackers to exploit the vulnerability to obtain sensitive information in the database...