CVE-2026-7389: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in EyouCMS up to 1.7.9. The affected element is the function GetSortData of the file application/common.php. The manipulation of the argument sortasc leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly an...

CVE-2025-22973: Exposure of Sensitive Information to an Unauthorized Actor

An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the httpcurl function in the '/application/common. php' file that directly retrieves the URL request response content...

CVE-2021-46097: Unrestricted Upload of File with Dangerous Type

Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.phpactionlog...