File upload vulnerability in BEESCMS backend up***.php page

BEESCMS is a scalable content management system CMS based on PHP and MySQL. A file upload vulnerability exists in the BEESCMS backend up.php page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

BEES V4.0 Arbitrary File Deletion Vulnerability

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. An arbitrary file deletion vulnerability exists in the BEESCMS 4.0 backend. The vulnerability is due to the system fails to filter parameters effectively. An attacker can exploit the vulnerability to delete...