CVE-2020-19954

An XML External Entity XXE vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files...

CVE-2020-19954

CVE-2020-19954 : An XML External Entity (XXE) vulnerability affects S-CMS 3.0, specifically the /api/notify.php endpoint, enabling an attacker to read arbitrary files. Root cause: XXE in XML processing. Documented impact across sources (NVD, CNVD, Red Hat). CVSS v3.1 base score 7.5 (HIGH); CVSS v...

PT-2021-10423

Name of the Vulnerable Software and Affected Versions: S-CMS version 3.0 Description: An XML External Entity XXE issue was found in the "api/notify.php" endpoint, allowing attackers to read arbitrary files. This could potentially lead to sensitive information disclosure. Recommendations: For S-CM...

CVE-2020-19954: Improper Restriction of XML External Entity Reference

An XML External Entity XXE vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files...

Design/Logic Flaw

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...

CVE-2018-18737

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...

CVE-2018-18737: Improper Restriction of XML External Entity Reference

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...

The micro-engine technology payment/wechat/nofity.php SQL injection vulnerability

No description provided by source...

Uploader 1.0.4 - notify.php blog Parameter XSS

The uploader WordPress plugin was affected by a notify.php blog Parameter XSS security vulnerability...

Uploader 1.0.0 - wp-content/plugins/uploader/views/notify.php num Parameter XSS

The uploader WordPress plugin was affected by a wp-content/plugins/uploader/views/notify.php num Parameter XSS security vulnerability...

CVE-2013-2287

The CVE-2013-2287 issue affects WordPress Uploader Plugin 1.0.4, specifically XSS in views/notify.php via the notify or blog parameters. The underlying vulnerability allows remote attackers to inject arbitrary scripts/HTML, with impact limited to partial integrity impact and no confidentiality/av...

CVE-2013-2287: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 notify or 2 blog parameter...

Destoon Sql注入漏洞一枚（有条件）

简要描述： 过滤不严。 详细说明： 下的最新版了 在destoon\api\pay\chinabank\notify.php中 $POST = $DPOST; if!$POST exit'error'; $bank = 'chinabank'; $PAY = cacheread'pay.php'; if!$PAY$bank'enable' exit'error'; //这里 必须要启用了这个支付方式才行 if!$PAY$bank'keycode' exit'error'; $key = $PAY$bank'keycode'; $void =trim$POST'void'; $vpmode...