AppCMS Cross-Site Scripting Vulnerability

AppCMS is a content management system CMS for mobile application downloads. A cross-site scripting vulnerability exists in AppCMS version 2.0.101, which can be exploited by an attacker to obtain sensitive information about other users...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36007

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

Arbitrary file deletion

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

Sql injection

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36007

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

Cross site scripting

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

Arbitrary file deletion

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36007

CVE-2020-36007 concerns AppCMS 2.0.101 where a cross-site scripting (XSS) vulnerability exists in /admin/template/tpl_app.php. The issue allows an attacker to obtain sensitive information of other users. Reported metrics show CVSSv2 base score 4.3 ( MEDIUM ) and CVSSv3.1 base score 6.1 ( MEDIUM )...

CVE-2020-36007

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36007

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...