IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687.Read More ...
Continue ReadingNovember 16, 2022
An issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in verification links, the newsletter sign-up functionality is vulnerable to the enumeration of subscribers' ...
Continue ReadingNovember 16, 2022
An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient output encoding of user-supplied data, the web application is vulnerable to cross-site scripting (XSS) at various location ...
Continue ReadingNovember 16, 2022
An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthenticated attackers can complete the password-reset process for any account and set a ...
Continue ReadingNovember 16, 2022
An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or sanitization of upload filenames, an externally reachable, unauthenticated update function permits writing files ...
Continue ReadingNovember 16, 2022
An issue was discovered in BACKCLICK Professional 5.9.63. Due to an exposed internal communications interface, it is possible to execute arbitrary system commands on the server.Read More ...
Continue ReadingNovember 16, 2022
An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user-supplied input, the application is vulnerable to SQL injection at various locations.Read More ...
Continue ReadingNovember 16, 2022
A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the album page.Read More ...
Continue ReadingNovember 16, 2022
Back to Main