SeaCMS 跨站请求伪造漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A cross-site request forgery vulnerability exists in SeaCMS version 13.0, which stems from the fact that manipulation of the parameters...

SQL Injection Vulnerability in PHPMyWind member.php File

PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . A SQL injection vulnerability exists in the PHPMyWind member.php file. The vulnerability is due to the $sql variable being passed in directly by a parameter, allowing an attacker to exploit the vulnerability to obtain...

Cross-site scripting vulnerability in the member.php page of UQCMS cloud commerce system

UQCMS cloud business system is a B2B2C e-commerce software that the program uses PHP+MYSQL and the template uses smarty. The UQCMS member.php page contains a cross-site scripting vulnerability that can be exploited by attackers to insert malicious code to pop-up boxes and obtain user cookies and...

NIUSHOP open source mall system front '/member.php' page there are arbitrary file upload vulnerabilities

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a PHP open source e-commerce system . NIUSHOP open source mall system front '/member.php' page there are arbitrary file upload vulnerability . As the...