Joomla Zoo by YooTheme Components SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla Zoo by YooTheme Components. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Super CMS Frontend lo***.php Page

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

DomainMOD 4.11.01 ssl-provider-name Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - 'ssl-provider-name' Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 14-02-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod...

DomainMOD 4.11.01 Registrar Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and beore - Registrar Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 04-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod Software...

DomainMOD 4.11.01 Owner Name Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - Owner name Field Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 04-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod...

DomainMOD 4.11.01 Custom Domain Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - Custom Domain Fields Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 04-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMo...

DomainMOD 4.11.01 Custom SSL Fields Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - Custom SSL Fields Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 04-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod...

DomainMOD 4.11.01 ssl-accounts.php Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - 'ssl-accounts.php username' Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 19-02-2019 Vendor Homepage : https://domainmod.org/ Software Information Link :...

DomainMOD 4.11.01 DisplayName Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - 'DisplayName' Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 09-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod...

SQL Injection Vulnerability in Daimi CMS_V6.0.6

Rice CMS is a free open source, fast, simple PC station and cell phone station building integrated integration system , to provide open source Android cell phone client APK and the corresponding server-side system source code download. Rice CMSV6.0.6 SQL injection vulnerability . Rice CMSV6.0.6...

SQL Injection Vulnerability in the front-end wa***_mo***.asp file of Eco Times Enterprise Online Bookkeeping Management System

Eco Times Business Online Bookkeeping Management System is a financial online bookkeeping software. SQL injection vulnerability exists in the front-end wamo.asp file of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in 74cms v4.2.111 Cookie

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms v4.2.111 Cookie SQL injection vulnerability, an attacker can use the vulnerabilit...

CVE-2019-3610 True Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerability

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key TK 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware...

SQL injection vulnerability in Ectouch frontend Ex***.cl***.php file

ECTouch is a mobile mall online store system launched by Shanghai Shangchuang Network Technology Co. A SQL injection vulnerability exists in the Ex.cl.php file in the frontend of Ectouch. Attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in eDoc Backend fo***.aspx Page

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc background fo.aspx page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Road Transportation Driver Continuing Education Management System at Multiple Provincial and Municipal Levels

A SQL injection vulnerability exists in the road transportation driver continuing education management system at multiple provincial and municipal levels. An attacker could exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Water Marketing Management System and Gas Charging Management System

Chengdu Tongfei Technology Co., Ltd. is a high-tech enterprise focusing on the development of application software and information system integration services in the public utilities industry, and has long been committed to providing intelligent gas, intelligent water, intelligent pipeline networ...

WebCzech CMS SQL Injection Vulnerability

WebCzech CMS is a content management system. WebCzech CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in in***.php Page in LaySNS

LaySNS is a lightweight, ThinkPHP+Layui-based integrated website management system that integrates content management and community interaction. LaySNS in.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

ansible: Failed tasks do not honour no_log option allowing for secrets to be disclosed in logs

Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the nolog task flag for failed tasks. When the nolog flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on th...