Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain defects, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

CVE-2024-34310

CVE-2024-34310 CVE-2024-34310 Предполагаемое описание Обнаружено, что Jin Fang Times Content Management System v3.2.3 содержит уязвимость SQL-инъекции через параметр id. Тип уязвимости SQL-инъекция Вендор продукта https://www.bjjfsd.com/ Затронутая кодовая база продукта Jin Fang times content...

CVE-2024-25169-Mezzanine-v6.0.0

製品: Mezzanine CMS バージョン: v6.0.0 発見日: 10.01.2024. 報告日: 10.01.2024. 脆弱性タイプ: 不適切なアクセス制御 CVE ID: CVE-2024-25169 説明: Mezzanine v6.0.0 には、攻撃者が巧妙に細工されたリクエストを介して管理パネルのアクセス制御メカニズムをバイパスできる問題があります。 POC は近日公開予定:...

Project-Exploiting-a-Vulnerability-in-Fuel-CMS-CVE-2018-16763-

Целью данного проекта было проведение аудита безопасности недавно запущенного блога компании Ackme Support Incorporated, чтобы выявить критически важные уязвимости до того, как сайт станет публичным. Задача заключалась в поиске способа удаленного выполнения кода и получения доступа к целевой...

cmsPoc

Внимание Проект перерабатывается: cmsPoc 2.0 Примечание: библиотека эксплойтов для версии 2.0 еще не обновлена, соответствующие интерфейсы отсутствуют, поэтому вызвать их невозможно. Если необходимо использовать, рекомендуется сначала использовать версию 1.0. cmsPoc 1.0 Требования python2.7...

CVE-2022-37207

CVE-2022-37207 CVE-2022-37207 POC Предлагаемое описание JFinal CMS 5.1.0 подвержен SQL-инъекции. Эти интерфейсы не используют один и тот же компонент, не имеют фильтров, но каждый использует свой собственный метод конкатенации SQL, что приводит к SQL-инъекции. Дополнительная информация...

CVE-2022-37206

CVE-2022-37206 CVE-2022-37206 POC Дополнительная информация https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql2.md Тип уязвимости SQL-инъекция Производитель продукта группа разработчиков База кода затронутого продукта https://github.com/jflyfox/jfinalcms - JFinal CMS...

CVE-2022-37208

37208 CVE-2022-37208 Предполагаемое описание JFinal CMS 5.1.0 уязвим для SQL-инъекций. Эти интерфейсы не используют один и тот же компонент и не имеют фильтров, но каждый использует свой собственный метод конкатенации SQL, что приводит к SQL-инъекции. Дополнительная информация...

CVE-2022-37201

CVE-2022-37201 CVE-2022-37201 POC POC Прежде всего, вам следует установить sqlmap вам нужно задать целевой домен или IP ваш cookie затем выполните команду root@kitploit: sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...

JCS

JCS Joomla Component Scanner создан для целей тестирования на проникновение в Joomla CMS JCS может помочь вам с последними уязвимостями и эксплойтами компонентов. База данных может обновляться из нескольких источников, и реализован краулер для поиска компонентов и ссылок на компоненты. Эта версия...