Postfix Admin Cross-Site Scripting Vulnerability (CNVD-2020-02708)

Postfix Admin is a web interface for configuring and managing Postfix-based email servers. A cross-site scripting vulnerability exists in Postfix Admin version 2.3.4. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the...

SQL Injection Vulnerability in ESPCMS-P8 Enterprise Website Management System

ESPCMS-P8 enterprise station management system is developed by PHP+MySQL, which supports enterprise news and product release, talent recruitment, download, independent form management, online message, online ordering, inquiry and membership and other related enterprise website functions. There is...

herbal-remedies-solutions.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1025194 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Centreon Cross-Site Scripting Vulnerability (CNVD-2019-46409)

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A cross-site scripting vulnerability exists in Centreon versions prior to 2.8.30, 18.x...

sampletemplates.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1023689 Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting sampletemplates.com...

Exhibitor 1.0.9 <= 1.7.1 RCE Vulnerability

Exhibitor is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nokia IMPACT Cross-Site Scripting Vulnerability

Nokia IMPACT is a suite of intelligent management platforms for the Internet of Things IoT from the Finnish company Nokia. A cross-site scripting vulnerability exists in Nokia IMPACT. The vulnerability stems from the lack of proper validation of client-side data by the web application. An attacke...

Pivotal Software RabbitMQ Cross-Site Scripting Vulnerability

Pivotal Software RabbitMQ is the United States Pivotal Software, Inc. of a set of implementation of the Advanced Message Queuing Protocol AMQP open source message broker software. A cross-site scripting vulnerability exists in Pivotal Software RabbitMQ. The vulnerability stems from a lack of prop...

The vulnerability of the Web application SIMATIC WinCC DataMonitor, related to insufficient validation of input data, allows a hacker to load any arbitrary ASPX code.

The vulnerability of the SIMATIC WinCC DataMonitor web application is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to upload any arbitrary ASPX code remotely...

Sql injection

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

Moodle cross-site scripting vulnerability (CNVD-2019-43885)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in Moodle, which stems from the lack of proper validation of client-side data in the WEB...

AngularJS Cross-Site Scripting Vulnerability

AngularJS is a TypeScript-based open source web application framework. A cross-site scripting vulnerability exists in AngularJS, which stems from the lack of proper validation of client-side data in a WEB application and can be exploited by an attacker to execute client-side code...

SAP Financial Consolidation Cross-Site Scripting Vulnerability

SAP Financial Consolidation is a financial statement solution from SAP. The product is designed to automate intercompany reconciliations and offsets, currency conversions, and provide financial statement generation. A cross-site scripting vulnerability exists in SAP Financial Consolidation. The...

TemaTres 3.0 - value Persistent Cross-site Scripting

TemaTres 3.0 - value Persistent Cross-site Scripting Exploit Title: TemaTres 3.0 - 'value' Persistent Cross-site Scripting Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source:...

TemaTres 3.0 - Cross-Site Request Forgery (Add Admin) Exploit

Exploit for php platform in category web applications Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source:...

TemaTres 3.0 Cross Site Request Forgery

Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14345...

TemaTres 3.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14345...

WordPress Blog2Social Plugin < 5.9.0 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113569";...

Code execution vulnerability in SeaCMS backend (CNVD-2019-45339)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a code execution vulnerability in the background of SeaCMS, which can be exploited by attackers to execute malicious code...

SQL Injection Vulnerability in 162100 Simple Forum System of Shenyang Huanggu District Ainong Network Technology Service Center (CNVD-2020-00002)

Huanggu District, Shenyang City, love thick network technology service center simple forum system is a forum website building system. Shenyang Huanggu District, Shenyang City, love thick network technology service center 162100 simple forum system there are SQL injection vulnerabilities, attacker...