476 matches found
CVE-2022-32411
An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...
PT-2022-21306
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0 Description An issue in the languages config file allows attackers to getshell. Recommendations For HongCMS version 3.0, consider restricting access to the languages config file until a patch is available...
CVE-2022-32412: Undefined Security Weakness
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32411: Undefined Security Weakness
An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...
PT-2022-21307
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0 Description An issue in the "/template/edit" component allows attackers to getshell. Recommendations For HongCMS version 3.0, as a temporary workaround, consider disabling access to the "/template/edit" component until a...
CVE-2021-42654
SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...
CVE-2021-42654
SiteServer CMS
CVE-2021-42654: Unrestricted Upload of File with Dangerous Type
SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...
SiteServer CMS 代码问题漏洞
SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Corporation. A security vulnerability exists in SiteServer CMS prior to version V5.1, which is caused by the unrestricted upload of a dangerous type of file getshell that can b...
CVE-2022-29363
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...
CVE-2022-29363
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...
CVE-2022-29363
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...
CVE-2022-29363
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...
CVE-2022-29363
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...
CVE-2022-29363: Deserialization of Untrusted Data
Phpok v6.1 was discovered to contain a deserialization vulnerability via the updatef function in logincontrol.php. This vulnerability allows attackers to getshell via writing arbitrary files...
CVE-2021-44912
In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploading to the files directory. Since .htaccess only restricts the PHP type, uploading HTML-type files leads to stored XSS vulnerabilities. If the .htaccess configuration is...
CVE-2021-44912: Improper Neutralization of Input During Web Page Generation
In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploading to the files directory. Since .htaccess only restricts the PHP type, uploading HTML-type files leads to stored XSS vulnerabilities. If the .htaccess configuration is...
CVE-2020-21654
emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...