PYSEC-2021-340

Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...

PYSEC-2021-339

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'...

CVE-2020-18701

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets...

CVE-2020-18701

CVE-2020-18701 affects Lin-CMS-Flask v0.1.1, where incorrect access control fails to invalidate a user’s authentication token on logout, enabling replay of packets to obtain sensitive information and/or gain privileges. Affected component is the authentication/session handling in Lin-CMS-Flask (v...

CVE-2020-18699

Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...

CVE-2020-18699

Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...

CVE-2020-18699

CVE-2020-18699 describes a Cross Site Scripting (XSS) issue in Lin-CMS-Flask v0.1.1. The vulnerability is triggered via input in the Username parameter of the component path app/api/cms/user.py, allowing remote attackers to execute arbitrary code within the context of the affected application. Th...

CVE-2020-18698

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'...

CVE-2020-18698

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'...

CVE-2020-18698

The CVE-2020-18698 entry concerns Lin-CMS-Flask v0.1.1 with an improper authentication flaw in the login path (component app/api/cms/user.py). The vulnerability enables remote brute-force login attempts without restriction. NVD/mitigations indicate an extremely high impact under CVSS-3.1: User au...

PT-2021-10215 · Unknown · Lin-Cms-Flask

Name of the Vulnerable Software and Affected Versions: Lin-CMS-Flask version 0.1.1 Description: The issue allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying...

PT-2021-10213 · Unknown · Lin-Cms-Flask

Name of the Vulnerable Software and Affected Versions: Lin-CMS-Flask version 0.1.1 Description: The issue allows remote attackers to launch brute force login attempts without restriction via the login function in the component app/api/cms/user.py. This enables attackers to attempt multiple logins...

TaleLin Lin-CMS-Flask 访问控制错误漏洞

TaleLin Lin-CMS-Flask is a content management system framework. an access control error vulnerability exists in TaleLin Lin-CMS-Flask, stemming from incorrect access control in Lin-CMS-Flask v0.1.1, which could be exploited by an attacker to obtain sensitive information and/or because the...

lin-cms-flask安全漏洞

lin-cms-flask is a content management system framework. lin-cms-flask version 0.1.1 contains a security vulnerability that can be exploited by remote attackers to brute force login via the "login" function in the component "app/api/cms/user.py"...

PT-2021-10214

Name of the Vulnerable Software and Affected Versions: Lin-CMS-Flask version 0.1.1 Description: The issue allows remote attackers to execute arbitrary code by entering scripts in the Username parameter of the component 'app/api/cms/user.py'. This enables attackers to perform Cross Site Scripting...

CVE-2020-18701: Incorrect Authorization

Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets...

CVE-2020-18699: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...

CVE-2020-18698: Improper Restriction of Excessive Authentication Attempts

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'...

Jinan Bo Lin Network Technology Co., Ltd. website building system ne*** page SQL injection vulnerability

Jinan Bo Lin Network Technology Co., Ltd. is a provide Jinan website construction, Jinan website production, Jinan web design, Jinan website design, Jinan website optimization, website maintenance, website revision, domain name space, 400 phone, store marketing and other Internet business Jinan...

Jinan Bo Lin Network Technology Co., Ltd. website building system ab*** page SQL injection vulnerability

Jinan Bo Lin Network Technology Co., Ltd. is a provide Jinan website construction, Jinan website production, Jinan web design, Jinan website design, Jinan website optimization, website maintenance, website revision, domain name space, 400 phone, store marketing and other Internet business Jinan...