3 matches found
Parameter updates not propagated
Handle gpersoon Vulnerability details Impact There are several functions to update parameters. However these parameters are only updated on the top level and not propagated to the other contracts. This could lead to various unpredictable results. Examples are: setNftHubAddress of RCFactory...
齐博地方门户系统sql注入
简要描述: 变量未初始化导致注入 详细说明: 齐博地方门户系统 齐博的全局过滤系统中由于存在如下代码,导致传入的参数可以成为全局变量 foreach$COOKIE AS $key=$value unset$$key; foreach$POST AS $key=$value !ereg"^\A-Z+",$key && $$key=$POST$key; foreach$GET AS $key=$value !ereg"^\A-Z+",$key && $$key=$GET$key; 所以系统中如果存在未初始化的变量,容易导致注入 2shou/post.php中 180行...
Plesk Small Business Manager 10.2.0 and Site Editor - Multiple Vulnerabilities
Plesk Small Business Manager 10.2.0 and Site Editor - Multiple Vulnerabilities XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor Vendor: Plesk Small Business Manager 10.2 + Site Editor Product Description URL http://www.parallels.com/products/small-business-panel/ Date:...