70 matches found
SeaCMS Security Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version V12.9, which is caused by an arbitrary file write vulnerability in adminweixin.php...
PT-2023-29143 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. It affects the component admin weixin.php, allowing for potential unauthorized file modifications. Recommendations: For SeaCMS version 12.9,...
GHSA-H384-PH77-3699 weixin-python XML External Entity vulnerability
A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The name...
weixin-python 代码问题漏洞
Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A code issue vulnerability exists in weixin-python version 0.3.0, which stems from the presence of xml external...
Weixin Robot Advanced <= 6.0.1 - Reflected XSS
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
GHSA-H755-H99P-9FFV XML External Entity Reference in weixin-java-tools
An issue was discovered in weixin-java-tools. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...
XML External Entity Reference in weixin-java-tools
An issue was discovered in weixin-java-tools. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...
CVE-2022-27336
Seacms v11.6 was discovered to contain a remote code execution RCE vulnerability via the component /admin/weixin.php...
Seacms 注入漏洞
SeaCMS is a free and open source web content management system written in PHP. The system is designed primarily to manage video-on-demand resources.A security vulnerability exists in Seacms v11.6, which stems from a remote code execution RCE vulnerability in the /admin/weixin.php component. No...
PT-2022-18381 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: Seacms version 11.6 Description: A remote code execution RCE issue was discovered in the /admin/weixin.php component. Recommendations: For Seacms version 11.6, consider restricting access to the /admin/weixin.php component until a patch is...
Guangdong Agricultural Credit WeChat public number has a logic flaw vulnerability
Guangdong Agricultural Credit WeChat Public Number is the official WeChat public number of Guangdong Rural Credit Union Federation, which mainly publicizes the financial services and reform and development achievements of the provincial federation and the province's agricultural commercial banks...
CVE-2019-5312
An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...
CVE-2019-5312
An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318...
CVE-2019-5312
CVE-2019-5312 affects weixin-java-tools v3.3.0. An XXE vulnerability exists in BaseWxPayResult.getXmlDoc, tied to an incomplete fix for CVE-2018-20318. Public references indicate high/critical impact (NETWORK, no authentication, victim capable of network access) with both CVSS v2 (7.5, PARTIAL co...
CVE-2018-20318
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file...
CVE-2018-20318
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file...
SQL injection vulnerability in Co***.php page in TinyShop E-commerce System V3.1.1
TinyShop is an e-commerce system online store system based on the Tiny framework, suitable for businesses and individuals to quickly build a personalized online store. TinyShop e-commerce system V3.1.1 in the Co.php page there is a SQL injection vulnerability, the vulnerability stems from the...
CVE-2018-20318
CVE-2018-20318: Weixin-java-tools v3.2.0 has an XXE vulnerability in the BaseWxPayResult.getXmlDoc method. Root cause: XML External Entity processing likely not mitigated. Exploit details and specific impact are not provided in the connected documents. No remediation is specified in the supplied ...
