S-CMS SQL Injection Vulnerability (CNVD-2018-26679)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS version 1.0, which can be exploited by remote attackers to execute SQL commands by sending the 'Sid' parameter to the wapindex.php?type=newsinfo URL...

CVE-2018-20392

The CVE-2018-20392 entry concerns S-A WebSTAR DPC2100 devices running v2.0.2r1256-060303. The vulnerability allows remote attackers to disclose credentials through SNMP requests targeting iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. Connected sources confirm the affe...

CVE-2018-20392

S-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

s-real.at XSS vulnerability

Open Bug Bounty ID: OBB-712481 Description| Value ---|--- Affected Website:| s-real.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

[SECURITY] Fedora 28 Update: nss-3.40.1-1.0.fc28

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

S-CMS e-commerce system SQL injection vulnerability in front-end ms***/fo***.php page

S-CMS e-commerce system is an e-commerce software. A SQL injection vulnerability exists in the front-end ms/fo.php page of S-CMS e-commerce system. An attacker can exploit the vulnerability to obtain sensitive database information...

S-CMS SQL Injection Vulnerability (CNVD-2019-08326)

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS 3.0 has a SQL injection vulnerability, which can be exploited by attackers through the Sid parameter to conduct SQL injection attacks...

Sql injection

S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...

CVE-2018-20018

S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...

CVE-2018-20018

S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...

CVE-2018-20018

S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...

CVE-2018-20018

CVE-2018-20018 affects S-CMS v3.0, where the S_id parameter enables SQL injection, demonstrated via /1/?type=productinfo&S_id=140. The connected CNVD/CNVD-2019-08326 and CNVD entries corroborate SQLi in S-CMS 3.0. The CVSS data shows base score 7.5 (high) for CVSS3.0 and 5.0 (medium) for CVSS2.0,...

Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u

Summary AT&T has released versions 1801-s, 1801-t and 1801-u for the Vyatta 5600. Details of this release can be found at https://console.bluemix.net/docs/infrastructure/virtual-router-appliance/vyatta-5600-security-fixes.htmlat-t-vyatta-5600-vrouter-software-patches Vulnerability Details CVEID:...

j-s-w.jp XSS vulnerability

Open Bug Bounty ID: OBB-706482 Description| Value ---|--- Affected Website:| j-s-w.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

s-x.co XSS vulnerability

Open Bug Bounty ID: OBB-705257 Description| Value ---|--- Affected Website:| s-x.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Ubuntu: Security Advisory (USN-3828-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: php-phpmailer6-6.0.6-1.fc28

PHPMailer - A full-featured email creation and transfer class for PHP Class Features Probably the world's most popular code for sending email from PHP! Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more Integrated SMTP support - send without a local...

[SECURITY] Fedora 28 Update: php-PHPMailer-5.2.27-1.fc28

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

[SECURITY] Fedora 29 Update: php-phpmailer6-6.0.6-1.fc29

PHPMailer - A full-featured email creation and transfer class for PHP Class Features Probably the world's most popular code for sending email from PHP! Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more Integrated SMTP support - send without a local...

[SECURITY] Fedora 29 Update: php-PHPMailer-5.2.27-1.fc29

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...