XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.Read More ...
Continue ReadingNovember 17, 2022
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/view_test.php.Read More ...
Continue ReadingNovember 17, 2022
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manage_user&id=.Read More ...
Continue ReadingNovember 17, 2022
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/view_client.php.Read More ...
Continue ReadingNovember 17, 2022
Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list.Read More ...
Continue ReadingNovember 17, 2022
Broken Access Control vulnerability in WPML Multilingual CMS premium plugin Read More ...
Continue ReadingNovember 17, 2022
Proofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control.Read More ...
Continue ReadingNovember 17, 2022
An arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is relat ...
Continue ReadingNovember 17, 2022
Back to Main