Online Birth Certificate System Cross-Site Scripting Vulnerability

Projectworlds Online Birth Certificate System is a website builder for providing birth certificates online from the Austrian company Projectworlds. A cross-site scripting vulnerability exists in Online Birth Certificate System Project Version V 1.0, which can be exploited by an attacker to inject...

Online Marriage Registration System 1.0 Remote Code Execution

Exploit Title: Online Marriage Registration System 1.0 Remote Code Execution Google Dork: N/A Date: 2020-05-31 Exploit Author: Selim Enes 'Enesdex' Karaduman Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/...

Arbitrary File Download Vulnerability in EcoTimes.com Enterprise Online Bookkeeping Management System

EcoTimes.com Business Online Bookkeeping Management System is a commercial system. There is an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files...

Ninety percent of a Bank online system has security vulnerabilities-vulnerability warning-the black bar safety net

Smart home devices, routers, cell phones, street common vending machines...... Life time may contact to the smart devices are likely to encounter a hacker to crack, facing security issues. Yesterday, in the XCon security focus information security technology summit sponsored by the“XPwn future...

PHPizabi notepad_body参数SQL注入漏洞

BUGTRAQ ID: 34223 PHPizabi是一款代码开源的在线交友、交流、婚介、商务合作系统。 PHPizabi的/theme/default/proc.inc.php模块中没有正确地验证用户所提交的notepadbody参数，远程攻击者可以通过提交恶意的查询请求执行SQL注入攻击。以下是有漏洞的代码段： ?php function bufferProcParse$buffer global $CONF; $tpl = new template; $tpl - LoadThis$buffer; // HANDLE POSTED NOTEPAD DATA \...