13 matches found
Halo 代码问题漏洞
Halo is a powerful and easy-to-use open-source website building tool developed by Halo. Version 2.22.14 of Halo has a code vulnerability. This vulnerability stems from server-side request forgery at the /plugins/-/install-from-uri endpoint, which may allow authenticated attackers to scan internal...
EUVD-2018-13165
Malware in sbrugna...
EUVD-2018-13003
Malware in sbrugna...
CVE-2018-20602
Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...
CVE-2022-48150
Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...
CVE-2022-48150
Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...
Shopware 跨站脚本漏洞
Shopware is a set of open source e-commerce software from German Shopware company . A security vulnerability exists in Shopware v5.5.10, which can be exploited by an attacker to conduct cross-site scripting XSS attacks via URI recovery/install/...
CVE-2019-16655
joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...
Authentication flaw
joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...
CVE-2019-16655
joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...
Design/Logic Flaw
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
Joyplus CMS Information Disclosure Vulnerability
Joyplus CMS is an efficient video movie website management system built with PHPmysql, independently developed by Zhi Jing Technology, which has been used as a backend management system for free products Joyplus Video, and after continuous improvement, it now has a complete functional system and...
Information disclosure
joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI...