75 matches found
CVE-2020-36004
AppCMS 2.0.101 is affected by a SQL injection in /admin/download_frame.php. The vulnerability, described in multiple sources (e.g., CNVD/CNNVD entries), allows an attacker to obtain sensitive information from the database. The Connected documents confirm the affected component and vulnerability c...
CVE-2020-36004
AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...
CVE-2020-36005: Undefined Security Weakness
AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
CVE-2020-36006: Undefined Security Weakness
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
AppCMS 跨站脚本漏洞
AppCMS is a content management system CMS for mobile application downloads. A cross-site scripting vulnerability exists in AppCMS version 2.0.101, which can be exploited by an attacker to obtain sensitive information about other users...
AppCMS 安全漏洞
AppCMS is a content management system CMS for mobile application downloads. A security vulnerability exists in AppCMS version 2.0.101, which can be exploited by an attacker to delete arbitrary files on the site...
AppCMS SQL注入漏洞
APPCMS is a professional APP content management system, APP application part needs to be used in combination with data center. A SQL injection vulnerability exists in /admin/downloadframe.php in AppCMS version 2.0.101. An attacker can exploit this vulnerability to obtain sensitive information fro...
CVE-2020-36004: Improper Neutralization of Special Elements used in an SQL Command
AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...
CVE-2020-36007: Improper Neutralization of Input During Web Page Generation
AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...
appcms V2.0 has an arbitrary file read vulnerability
appcms is a professional APP content management system that provides various extension modules, such as information, recommended positions, topics, friendly links, body internal links, etc., to help webmasters better personalize their websites. appcms V2.0 has an arbitrary file reading...
Command Execution Vulnerability in AppCMS
APPCMS is a professional APP content management system that provides a variety of extension modules, such as information, recommended positions, topics, friendly links, body internal links and so on, to help webmasters better personalize their own websites. AppCMS has a command execution...
Cross site scripting
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...
CVE-2019-9595
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...
CVE-2019-9595
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...
CVE-2019-9595
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...
CVE-2019-9595
CVE-2019-9595 affects AppCMS 2.0.101 and enables cross-site scripting via the upload/callback.php parameters. The vulnerability is a client-visible XSS in a parameter passed to the upload/callback.php endpoint. NVD reports CVSS v2 base score 4.3 (MEDIUM) with network access, and CVSS v3 base scor...
CVE-2019-9595: Improper Neutralization of Input During Web Page Generation
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...
Multiple Arbitrary File Deletion Vulnerabilities in AppCMs V2.0.101
APPCMS is a professional APP content management system that provides a variety of extension modules, such as information, recommended positions, topics, friendly links, body internal links and so on, to help webmasters better personalize their own websites. AppCMs V2.0.101 has multiple arbitrary...
Command Execution Vulnerability in AppCMS Backend Template Management Service
APPCMS is a professional APP content management system that provides a variety of extension modules, such as information, recommended positions, topics, friendly links, body internal links and so on, to help webmasters better personalize their own websites. A command execution vulnerability exist...
