PT-2026-56664

Name of the Vulnerable Software and Affected Versions Drupal UI Patterns SDC in Drupal UI versions 2.0.0 through 2.0.17 Description An issue exists where the module does not sufficiently sanitize markup passed to components in certain scenarios, leading to Stored Cross-site Scripting XSS...

Command Execution Vulnerability in Man City CMS

Man City CMS program is a set of CI framework for the development of the core, in the PHP + MYSQL environment running under the perfect and powerful rapid station-building system. A command execution vulnerability exists in ManCity CMS, which can be exploited by attackers to cause command executi...

SQL Injection Vulnerability in Tianjin Billy Technology Development Co.

Tianjin Billy Science and Technology Development Co., Ltd. is a modern high-tech company with sales of instrumentation products, engineering design and management consulting as a whole. There is a SQL injection vulnerability in the website building system of Tianjin Billy Science and Technology...

Directory Traversal Vulnerability in PHPMyWind

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . PHPMyWind has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in the Website Building System of Ruian Uber Technology Co.

Ltd. is a social public to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM desig...

SQL Injection Vulnerability in Website Building System of Shanghai Qinwang Network Technology Co.

Shanghai Qinwang Network Technology Co., Ltd. is a company with website construction, mobile Internet products and integrated marketing services as its core business. There is a SQL injection vulnerability in the website building system of Shanghai Qinwang Network Technology Co. Ltd, which can be...

File Upload Vulnerability in Enterprise Website Building System of Zibo Shining Network Technology Co.

Zibo Shining Network Technology Co., Ltd. enterprise station-building system a specialized enterprise station-building solutions for the product. There is a file upload vulnerability in the Zibo Shining Network Technology Co., Ltd. system that can be exploited by an attacker to gain access to the...

File Upload Vulnerability in Mcms

Mcms is a web site building system of MINGFEI TECHNOLOGY CO. Mcms suffers from a file upload vulnerability that can be exploited by an attacker to gain webmaster privileges...

SQL Injection Vulnerability in Hangzhou Chenshuo Network Technology Co.

Hangzhou Chenshuo Network Technology Co., Ltd. is a company that provides computer hardware and software, network information technology, e-commerce technology, technology development of electronic products and other services. Hangzhou Chenshuo Network Technology Co., Ltd. website building system...

Shenzhen with the world Technology Co., Ltd. series of station building system with xss vulnerability

Shenzhen with the world technology limited company is a travel agency SaaS intelligent management system research and development, sales and the establishment of industry data center as one of the new Internet enterprises. Ltd. series of website building system xss vulnerability, attackers can us...

SQL Injection Vulnerability in Explosive Industry Website Building System of Guangzhou Sino-explosive Safety Net Technology Co.

Ltd. is a collection of system integration, software development, technical services, consulting and other consulting as a whole, focusing on the construction of dangerous goods industry "information highway" - Explosives special network, building industry grids and database clusters, aimed at...

SQL injection vulnerability in class parameter of Interactive Creation website building system

Interactive Creative Xiamen Digital Technology Co., Ltd. is a brand website construction company in Fujian Province, "Interactive Creative" is one of its independent brands. A SQL injection vulnerability exists in the class parameter of Interactive Creative's website building system. An attacker...

[SECURITY] Fedora 23 Update: drupal7-features-2.10-1.fc23

The features module enables the capture and management of features in Drupa l. A feature is a collection of Drupal entities which taken together satisfy a certain use-case. Features provides a UI and API for taking different site building components from modules with exportables and bundling them...

[SECURITY] Fedora 24 Update: drupal7-features-2.10-1.fc24

The features module enables the capture and management of features in Drupa l. A feature is a collection of Drupal entities which taken together satisfy a certain use-case. Features provides a UI and API for taking different site building components from modules with exportables and bundling them...