137 matches found
ExpertPDF 安全漏洞
ExpertPDF is a .NET library whose core functionality is to allow the conversion of HTML to PDF, either from raw HTML or from a file. A security vulnerability exists in ExpertPDF that stems from an improperly designed or implemented code development process for a web-based system or product...
Exploit for Cross-Site Request Forgery (CSRF) in Webmin
CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploit...
Unauthorized Access Vulnerability in Huawei Technologies Co. web-based network management system
Huawei Technologies Co., Ltd. is a leading global information and communications technology ICT solutions provider. An unauthorized access vulnerability exists in Huawei Technologies web-based network management system, which can be exploited by attackers to obtain sensitive information...
Unauthorized Access Vulnerability in web-based network management system of Xinhua San Technologies Co.
Xinhua San Technology Co., Ltd. is committed to becoming a trusted partner for customers' business innovation and digital transformation. An unauthorized access vulnerability exists in the web-based network management system of Xinhua San Technologies Limited, which can be exploited by attackers ...
Soar Cloud System HR Code Issue Vulnerability
Soar Cloud System HR is an application from Soar Cloud China. It provides a human resources system. A code issue vulnerability exists in Soar Cloud System that arises from improper design or implementation during code development for a web-based system or product...
SOURCEFORGE Adminer Code Issue Vulnerability
SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. It provides database management in a single PHP file. A code issue vulnerability exists in SOURCEFORGE Adminer that arises from improper design or implementation during code development of a web-based system or product...
MediaWiki code issue vulnerability (CNVD-2020-58046)
MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A code issue vulnerability exists in MediaWiki. The vulnerability stems from ...
PostgreSQL Code Issues Vulnerabilities
PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A code issue vulnerability exists in PostgreSQL. The vulnerability...
Tecnick.com TCExam Cross-Site Scripting Vulnerability (CNVD-2020-28047)
Tecnick.com TCExam is a Web-based open source e-exam system from Tecnick.com, UK. The system is mainly used for online exams and more. A security vulnerability exists in Tecnick.com TCExam, which can be exploited by attackers to cause cross-site scripting XSS attacks...
Tecnick.com TCExam Cross-Site Scripting Vulnerability
Tecnick.com TCExam is a Web-based open source e-exam system from Tecnick.com, UK. The system is mainly used for online exams and more. A security vulnerability exists in Tecnick.com TCExam, which can be exploited by attackers to cause cross-site scripting XSS attacks...
Tecnick.com TCExam Cross-Site Scripting Vulnerability (CNVD-2020-28046)
Tecnick.com TCExam is a Web-based open source e-exam system from Tecnick.com, UK. The system is mainly used for online exams and more. A security vulnerability exists in Tecnick.com TCExam, which can be exploited by attackers to cause cross-site scripting XSS attacks...
Tecnick.com TCExam Cross-Site Scripting Vulnerability (CNVD-2020-28048)
Tecnick.com TCExam is a Web-based open source e-exam system from Tecnick.com, UK. The system is mainly used for online exams and more. A security vulnerability exists in Tecnick.com TCExam, which can be exploited by attackers to cause cross-site scripting XSS attacks...
webERP 4.15.1 Backup Disclosure
Exploit Title: webERP 4.15.1 - Unauthenticated Backup File Access Date: 2020-05-01 Author: Besim ALTINOK Vendor Homepage: http://www.weberp.org Software Link: https://sourceforge.net/projects/web-erp/ Version: v4.15.1 Tested on: Xampp Credit: İsmail BOZKURT...
Subrion CMS Authorization Issues Vulnerability
Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. An authorization issue vulnerability exists in Subrion CMS version 4.2.1. The vulnerability stems from a lack of...
dom4j code problem vulnerability
dom4j is an open source framework for processing XML . A code issue vulnerability exists in dom4j versions prior to 2.1.3. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. No detailed vulnerability details are provided ...
File Upload Vulnerability in PHPOA System of Guilin Tiansheng Zhichuang Information Technology Co.
PHPOA using PHP + MYSQL open source language , Guilin Born Wisdom Information Technology Co., Ltd. has been committed to application management software development at the grass-roots level . Guilin Tiansheng Zhichuang Information Technology Co., Ltd. PHPOA system file upload vulnerability,...
Accenture Mercury Code Issue Vulnerability
Accenture Mercury is a microservices rapid development platform. A code issue vulnerability exists in Accenture Mercury versions prior to 1.12.28. The vulnerability arises from an improperly designed or implemented code development process for a web-based system or product. No detailed...
GitLab Code Issue Vulnerability (CNVD-2020-19601)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A code issue vulnerability exists in GitLab Enterprise...
Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-18338)
Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A reflective cross-site scripting vulnerability exists in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9. The...
Atlassian Jira Code Issue Vulnerability
Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira. The vulnerability stems from an improperly designed or implemented code...