CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php is affected by an arbitrary file deletion vulnerability. Multiple sources (CVE-2020-36006; CNVD-2021-40856; CNNVD-202106-261; other CVE mirrors) describe a vulnerability in AppCMS 2.0.101 that allows an attacker to delete arbitrary files on the site. The connecte...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php contains an arbitrary file deletion vulnerability. The CVE-2020-36005 entry indicates an ability for an attacker to delete arbitrary files on the site. Connected documents confirm the same flaw across CNVD/CNNVD listings, but do not provide concrete exploit detail...

CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

CVE-2020-36004

AppCMS 2.0.101 is affected by a SQL injection in /admin/download_frame.php. The vulnerability, described in multiple sources (e.g., CNVD/CNNVD entries), allows an attacker to obtain sensitive information from the database. The Connected documents confirm the affected component and vulnerability c...

CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

CVE-2020-36007: Improper Neutralization of Input During Web Page Generation

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

PT-2021-11901

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows attackers to delete arbitrary files on the site due to an arbitrary file deletion vulnerability in /admin/app.php. Recommendations: For AppCMS version 2.0.101, as a temporary workaround,...

PT-2021-11903

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows an attacker to perform a cross-site scripting attack, potentially obtaining sensitive information of other users. This is related to the /admin/template/tpl app.php file. Recommendations: F...

CVE-2020-36004: Improper Neutralization of Special Elements used in an SQL Command

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

CVE-2020-36006: Undefined Security Weakness

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36005: Undefined Security Weakness

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

AppCMS 安全漏洞

AppCMS is a content management system CMS for mobile application downloads. A security vulnerability exists in AppCMS version 2.0.101, which can be exploited by an attacker to delete arbitrary files on the site...

AppCMS 跨站脚本漏洞

AppCMS is a content management system CMS for mobile application downloads. A cross-site scripting vulnerability exists in AppCMS version 2.0.101, which can be exploited by an attacker to obtain sensitive information about other users...

PT-2021-11902

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows attackers to delete arbitrary files on the site due to an arbitrary file deletion vulnerability in /admin/info.php. Recommendations: For AppCMS version 2.0.101, consider restricting access ...

PT-2021-11900

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows attackers to obtain sensitive database information through a SQL injection vulnerability in the /admin/download frame.php file. Recommendations: For AppCMS version 2.0.101, consider...

AppCMS SQL注入漏洞

APPCMS is a professional APP content management system, APP application part needs to be used in combination with data center. A SQL injection vulnerability exists in /admin/downloadframe.php in AppCMS version 2.0.101. An attacker can exploit this vulnerability to obtain sensitive information fro...

appcms V2.0 has an arbitrary file read vulnerability

appcms is a professional APP content management system that provides various extension modules, such as information, recommended positions, topics, friendly links, body internal links, etc., to help webmasters better personalize their websites. appcms V2.0 has an arbitrary file reading...