1084 matches found
Command Execution Vulnerability in YCCMS
YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS has a command execution vulnerability that can be exploited by attackers to execute code to gain control of the server...
File Upload Vulnerability in YCCMS
YCCMS is a PHP version of a lightweight website building system. YCCMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...
Command Execution Vulnerability in AdminSet
Adminset is a true fully automated Ops platform developed with Ops thinking in mind. AdminSet suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...
Oracle Fusion Middleware WebLogic Server Remote Code Execution Vulnerability (CNVD-2020-23014)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...
Oracle Fusion Middleware WebLogic Server Remote Code Execution Vulnerability (CNVD-2020-23015)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...
LJCMS suffers from a file upload vulnerability (CNVD-2020-26416)
LJCMS is an open source enterprise website management system based on PHP+MYSQL. LJCMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of a web server...
CVE-2020-2762
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...
CVE-2020-2759
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2020-2779
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
WSO2 API Manager Carbon Interface 3.0.0 Cross Site Scripting
Document Title: =============== WSO2 API Manager Stored XSS Vulnerability Common Vulnerability Scoring System: ==================================== 5.4 CVE : =================== N/A Security Advisory : =================== https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0700...
CVE-2019-2815
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...
Arbitrary File Write Vulnerability in Gila CMS
Gila CMS is an open source content management system. Gila CMS suffers from an arbitrary file write vulnerability that can be exploited by an attacker to write malicious code to the server and gain administrative privileges on the server...
File Upload Vulnerability on Scarecrow Enterprise Site (CNVD-2020-27175)
Scarecrow Enterprise Station based on PHP + Sqlite/MySQL open source simple and compact free enterprise website system. Scarecrow Enterprise Station has a file upload vulnerability that can be exploited by attackers to gain control of the server...
CVE-2018-2787
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24728)
Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...
Sql injection
A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to expose and compromise the web server, expose database tables and values, and potentially execute system-based commands as the mysql user...
QIWI: SQL injection on contactws.contact-sys.com in TRateObject.AddForOffice in USER_ID parameter leads to remote code execution
Summary The API interface on https://contactws.contact-sys.com:3456/ accepts a body to interact with the server's AppServ object. Because of insufficient input validation, an attacker can abuse the USERID parameter of the TRateObject.AddForOffice method to inject arbitrary SQL statements. This...
QIWI: SQL injection on contactws.contact-sys.com in TScenObject action ScenObjects leads to remote code execution
Summary The API interface on https://contactws.contact-sys.com:3456/ accepts a body to interact with the server's AppServ object. Because of insufficient input validation, an attacker can abuse the SCENID parameter to inject arbitrary SQL statements into the WHERE clause of the underlying SQL...
115CMS suffers from a file upload vulnerability (CNVD-2020-20191)
115CMS is a content management system developed with ThinkPHP framework. 115CMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of a web server...