ILASIII 数字化图书管理系统 RdrRInforDetail.aspx 参数Name SQL注入漏洞

No description provided by source...

Synnefo Internet Management Software Cross-Site Scripting Vulnerability

Synnefo Internet Management Software IMS is a suite of network management software from Synnefo India. A cross-site scripting vulnerability exists in Synnefo IMS 2015 version of synnefoclient, which stems from the packagehistory/listusagesdata URI failing to adequately filter the 'planname '...

Synnefo Client Cross Site Scripting

Information ================================= Vulnerability type: Cross Site Scripting XSS Vendor: http://www.synnefoims.com/ Product: Synnefo Client for Synnefo Internet Management Software IMS 2015 http://www.synnefoims.com/products.html CVE Reference: =================================...

Role Scoper WordPress Plugin Reflective Cross-Site Scripting Vulnerability

Role Scoper WordPress plugin is comprehensive access control solution that controls read and edit permissions like a CMS. Role Scoper WordPress 1.3.66 and earlier versions do not effectively filter the "objectname" HTTP GET parameter value of "/wp-admin/admin.php" when "page" is set to...

OcProducts OcPortal 'FIELD_NAME' Parameter Cross-Site Scripting Vulnerability

OcProducts ocPortal is an open source PHP and MySQL based Content Management System CMS from OcProducts. A cross-site scripting vulnerability exists in OcProducts OcPortal. An attacker can exploit this vulnerability to execute arbitrary script code, steal cookie-based authentication and launch...

PT-2016-3297 · Gnu +3 · Gnu Tar +3

Name of the Vulnerable Software and Affected Versions: GNU tar versions 1.14 through 1.29 Description: The issue is related to a directory traversal vulnerability in the safer name suffix function. This vulnerability might allow remote attackers to bypass an intended protection mechanism and writ...

Information disclosure

The GetResource servlet in Pentaho Business Analytics BA Suite 4.5.x, 4.8.x, and 5.0.x through 5.2.x and Pentaho Data Integration PDI Suite 4.3.x, 4.4.x, and 5.0.x through 5.2.x does not restrict access to files in the pentaho-solutions/system folder, which allows remote attackers to obtain...

F5 Networks BIG-IP : BIG-IQ / BIG-IP privilege escalation vulnerability (K15229)

F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter in a request to the user's page in mgmt/shared/authz/users/. CVE-2014-3220 Impact An authenticated user with limited access may be able to gain...

CVE-2014-2570

Cross-site scripting XSS vulnerability in www/makesubset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

UBUNTU-CVE-2014-2570

Cross-site scripting XSS vulnerability in www/makesubset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2014-2570

Cross-site scripting XSS vulnerability in www/makesubset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2014-2570

Cross-site scripting XSS vulnerability in www/makesubset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Panmicro e-office Collaboration Management Platform File Download Vulnerability

Panmicro e-office's /inc/attach.php page has no filter on the file download name ATTACHMENTNAME passed in by the url... /, which can be used ... / to traverse the directory so that any file in any directory can be downloaded, leading to the formation of an arbitrary file download problem...

Generalized SQL Injection Vulnerability in Name Parameter of Beijing Zixin Newspaper Technology Digital Newspaper System

Beijing Purple New Digital Newspaper System is a perfect, efficient, stable, reliable, flexible and scalable digital workflow management system for combined editions. A generic SQL injection vulnerability exists in the name parameter of the Beijing Purple New Newspaper Technology Digital Newspape...

Free Reprintables ArticleFR Cross-Site Scripting Vulnerability

ArticleFR is an article directory and content catalog system. Multiple cross-site scripting vulnerabilities exist in Free Reprintables ArticleFR version 3.0.6, which stem from the dashboard/settings/categories/ URI not sufficiently filtering the 'name' parameter, the dashboard/settings/links/ URI...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter to dashboard/settings/categories/, 2 title or 3 rel parameter to dashboard/settings/links/, or 4 url parameter to...

PT-2015-6970 · Blackcat · Blackcat Cms

Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.1.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the name in a new group to "backend/groups/index.php" API endpoint. This enables attackers to perform cross-site scripting XS...

SQL Injection Vulnerability in Name Parameter of Times Internet Enterprise Email System

Times Internet is dedicated to providing professional email service providers for a wide range of enterprise-level users. A SQL injection vulnerability exists in the name parameter of the webmail/login.php page in version 2.2.5 of Times Internet's enterprise email system. It allows attackers to...

Multiple Cross-Site Scripting Vulnerabilities in MySql Lite Administrator beta-1

MySql Lite Administrator is a graphical tool for managing Mysql database files. A cross-site scripting vulnerability exists in MySql Lite Administrator beta-1. Due to the tabella.php, coloni.php, and insert.php scripts failing to adequately filter the 'tablename' parameter; the coloni.php script...

CVE-2015-5064

Multiple cross-site scripting XSS vulnerabilities in MySql Lite Administrator mysql-lite-administrator beta-1 allow remote attackers to inject arbitrary web script or HTML via the tablename parameter to 1 tabella.php, 2 coloni.php, or 3 insert.php or 4 numrow parameter to coloni.php...