68 matches found
CVE-2020-36004
AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...
CVE-2020-36007
AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...
CVE-2020-36005
AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
CVE-2020-36006
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
CVE-2020-36004
AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...
Arbitrary file deletion
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
Sql injection
AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...
Cross site scripting
AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...
CVE-2020-36006
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
CVE-2020-36005
AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
CVE-2020-36007
AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...
Arbitrary file deletion
AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
CVE-2020-36007
CVE-2020-36007 concerns AppCMS 2.0.101 where a cross-site scripting (XSS) vulnerability exists in /admin/template/tpl_app.php. The issue allows an attacker to obtain sensitive information of other users. Reported metrics show CVSSv2 base score 4.3 ( MEDIUM ) and CVSSv3.1 base score 6.1 ( MEDIUM )...
CVE-2020-36007
AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...
CVE-2020-36006
AppCMS 2.0.101 in /admin/info.php is affected by an arbitrary file deletion vulnerability. Multiple sources (CVE-2020-36006; CNVD-2021-40856; CNNVD-202106-261; other CVE mirrors) describe a vulnerability in AppCMS 2.0.101 that allows an attacker to delete arbitrary files on the site. The connecte...
CVE-2020-36006
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
CVE-2020-36005
AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
CVE-2020-36005
AppCMS 2.0.101 in /admin/app.php contains an arbitrary file deletion vulnerability. The CVE-2020-36005 entry indicates an ability for an attacker to delete arbitrary files on the site. Connected documents confirm the same flaw across CNVD/CNNVD listings, but do not provide concrete exploit detail...
CVE-2020-36004
AppCMS 2.0.101 is affected by a SQL injection in /admin/download_frame.php. The vulnerability, described in multiple sources (e.g., CNVD/CNNVD entries), allows an attacker to obtain sensitive information from the database. The Connected documents confirm the affected component and vulnerability c...