3521 matches found
CVE-2018-18082: Improper Neutralization of Input During Web Page Generation
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI...
Chinese Spying Chips Found Hidden On Servers Used By US Companies
A media report today revealed details of a significant supply chain attack which appears to be one of the largest corporate espionage and hardware hacking programs from a nation-state. According to a lengthy report published today by Bloomberg, a tiny surveillance chip, not much bigger than a gra...
Chinese Spying Chips Found Hidden On Servers Used By US Companies
A media report today revealed details of a significant supply chain attack which appears to be one of the largest corporate espionage and hardware hacking programs from a nation-state. According to a lengthy report published today by Bloomberg, a tiny surveillance chip, not much bigger than a gra...
CVE-2018-17391
SQL Injection exists in authorspost.php in Super Cms Blog Pro 1.0 via the author parameter...
Sql injection
SQL Injection exists in authorspost.php in Super Cms Blog Pro 1.0 via the author parameter...
CVE-2018-17391
SQL Injection exists in authorspost.php in Super Cms Blog Pro 1.0 via the author parameter...
CVE-2018-17391: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in authorspost.php in Super Cms Blog Pro 1.0 via the author parameter...
CVE-2018-17391
CVE-2018-17391 describes an SQL injection in Super Cms Blog Pro 1.0, exploitable via the authors_post.php?author= parameter. Multiple sources (NVD, CVE list, CNVD, Prion, CIRCL) reference the same vulnerability with the same affected component and entry. Public exploit and proof-of-concept activi...
Super Cms Blog Pro SQL Injection Vulnerability
Super Cms Blog Pro is a personal blogging system. A SQL injection vulnerability exists in Super Cms Blog Pro version 1.0. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...
Super Cms Blog Pro 1.0 - SQL Injection
Super Cms Blog Pro 1.0 - SQL Injection Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://coolscript.cf/ Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...
Super Cms Blog Pro 1.0 SQL Injection
Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://coolscript.cf/ Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-17391 Exploit Author: Ihsan...
Super Cms Blog Pro 1.0 - SQL Injection
Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://coolscript.cf/ Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-17391 Exploit Author: Ihsan...
CVE-2018-16448
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...
CVE-2018-16448
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...
waimai Super Cms Cross-Site Request Forgery Vulnerability (CNVD-2018-19089)
waimai Super Cms is a takeaway ordering system. The system is compatible with IE, Firefox, Chrome, Safari and Opera browsers. A cross-site request forgery vulnerability exists in waimai Super Cms 20150505, which can be exploited by a remote attacker to change the configuration with the help of th...
Design/Logic Flaw
In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add...
CVE-2018-16315
In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add...
CVE-2018-16315
In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add...
CVE-2018-16315
CVE-2018-16315 affects waimai Super Cms 20150505 with a CSRF weakness that allows an attacker to alter configuration through admin.php?m=Config&a=add. The CNVD/CVE records describe remote exploitation that enables configuration changes via crafted requests; NVD notes CSRF vector affecting configu...