Cross-site Scripting (XSS)

Typo3/Neos is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper handling of user input, allowing attackers to tamper with page rendering, redirect victims, capture credentials, and potentially upload backdoors...

File Upload Vulnerability in Gxlcmsqy System

GxlcmsQY system is a simple program tailored for business users. A file upload vulnerability exists in Gxlcmsqy System. An attacker logging into the backend can upload backdoor files and gain control of the web server...