Cross-site scripting vulnerability in PHP version of XYCMS message board frontend

XYCMS message board PHP version is to php + MySQL for the development of php message board source code, software for the ordinary message board, can be widely used in corporate websites and other websites that need a message board to use. XYCMS message board PHP version of the front of the...

CVE-2020-6200

The SAP Commerce SmartEdit Extension, versions- 6.6, 6.7, 1808, 1811, is vulnerable to client-side angularjs template injection, a variant of Cross-Site-Scripting XSS that exploits the templating facilities of the angular framework...

CmsEasy has a logic flaw vulnerability

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...

Selesta Visual Access Manager Cross-Site Scripting Vulnerability (CNVD-2020-14669)

Selesta Visual Access Manager VAM is the Selesta Visual Access Manager. A cross-site scripting vulnerability exists in Selesta Visual Access Manager VAM versions 4.15.0 through 4.29. The vulnerability stems from a lack of proper validation of client data by the web application. An attacker can...

SQL Injection Vulnerability in DM Website Building System (CNVD-2020-23763)

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website builder system has a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information on the sit...

myregent.ac.za Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1102891 Security Researcher Broly157 Helped patch 1605 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting myregent.ac.za website an...

SimpleSAMLphp Log Message Disclosure Vulnerability

SimpleSAMLphp is a PHP authentication application that implements the SAML 2.0 Service Provider and Identity Provider features. A log information disclosure vulnerability exists in SimpleSAMLphp. The vulnerability originates from the abnormal output of log files from a web system or product. An...

todaypk.media Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8547 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting todaypk.media website and its users. Following coordinated...

CVE-2020-0693

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694...

Dolibarr cross-site scripting vulnerability (CNVD-2020-04932)

Dolibarr is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr. The...

WSO2 API Manager Cross-Site Scripting Vulnerability (CNVD-2020-05091)

WSO2 API Manager is an open source api management platform , provides a series of api creation , release , lifecycle management , version control , monetization, governance and security features , used to support organizations to achieve soa. A cross-site scripting vulnerability exists in WSO2 AP...

CHIYU BF430 TCP IP Converter Cross Site Scripting

Exploit Title: CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting Google Dork: In Shodan search engine, the filter is "CHIYU" Date: 2020-02-11 Exploit Author: Luca.Chiou Vendor Homepage: https://www.chiyu-t.com.tw/en/ Version: BF430 232/485 TCP/IP Converter all versions prior to 1.16.00...

AKCMS suffers from a command execution vulnerability (CNVD-2020-10179)

AKCMS is a lightweight content management system based on PHP and MySQL. A command execution vulnerability exists in AKCMS, which can be exploited by attackers to execute commands and gain server privileges...

Simplejobscript.com SJS controllers/page_apply.php script upload vulnerability

Simplejobscript.com SJS is a WEB based recruitment application service program. A security vulnerability exists in Simplejobscript.com SJS controllers/pageapply.php at the upload of resumes, which can be exploited by remote attackers to submit a special PHP script request to upload and execute...

ZOHO ManageEngine ServiceDesk Plus Reflective Cross-Site Scripting Vulnerability

ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. A reflective...

sofagoodsofa.com.hk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1066463 Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting sofagoodsofa.com.hk website and its users. Following...

RICOH SP C250DN Cross-Site Request Forgery Vulnerability

The RICOH SP C250DN is a printer from the Japanese company Ricoh RICOH. A cross-site request forgery vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker cou...

Juniper Networks Junos OS Cross-Site Scripting Vulnerability (CNVD-2020-03713)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A cross-site scripting vulnerability exists in J-Web in Juniper Networks Junos OS, which arises from a lack of proper...

XSS Vulnerability in the User Registration Page of Angel School's Training Website System

Angel school training website system is an open source website management system. Angel school training website system user registration page has an XSS vulnerability that can be exploited by attackers to execute malicious script code...

Red Hat CloudForms Management Engine Cross-Site Request Forgery Vulnerability (CNVD-2020-01942)

Red Hat CloudForms Management Engine CFME is a management engine for IaaS Infrastructure as a Service cloud service solutions from Red Hat, Inc. A cross-site request forgery vulnerability exists in Red Hat CFME, which arises from a WEB application that does not adequately validate that a request ...