Laoban CMS v2.0 Vulnerabilities in Backend

Laoban CMS content management system referred to as: Laoban CMS is developed by Laoban based on PHP + MYSQL environment of the open source station-building system. Laoban CMS v2.0 has a vulnerability in the background. An attacker can exploit the vulnerability to gain unauthorized access...

Arbitrary File Read Vulnerability in Metinfo 6.0.0 Backend

MetInfo is a content management system developed using PHP and Mysql. An arbitrary file read vulnerability exists in the Metinfo version 6.0.0 backend. An attacker can exploit the vulnerability to read sensitive files on a website...

Arbitrary File Deletion Vulnerability in GreenCMS Backend

GreenCMS is an open source content management system written in PHP by Green Shade Studio, which is based on ThinkPHP, the most popular PHP development framework in China. GreenCMS background there are any file deletion vulnerability , attackers can use the vulnerability to delete any file...

Code Execution Vulnerability in Gxlcms News System

Gxlcms News System is a news cms content management system developed in php+mysql. Gxlcms news system has a code execution vulnerability that can be exploited by an attacker to execute remote code...

Stored Cross-Site Scripting Vulnerability in PHPMyWind v5.5 Backend

HPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A stored cross-site scripting vulnerability exists in the backend of PHPMyWind v5.5. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user...

NUCMS V1.1 SQL Injection Vulnerability in Backend

NUCMS content management system is an open source website management system. NUCMS V1.1 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Code execution vulnerability in weiphp 2.0 system backend

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. A code execution vulnerability exists in the weiphp 2.0 backend, which can be exploited by attackers to execute code and thus gain control of the server...

ArticleSetup Login Bypass Vulnerability

ArticleSetup is an article publishing management system based on PHP language . A login bypass vulnerability exists in the backend login function of ArticleSetup version 1.00, which can be exploited by an attacker to log in to the system directly as an administrator...

Code execution vulnerability in cms made simple backend

CMS Made Simple is an open source content management system. It is built using PHP and Smarty Engine , which separates content , functionality and templates . cms made simple version 2.2.7 has a code execution vulnerability in the backend when performing module import, which can be exploited by a...

x6cms backend has arbitrary file read vulnerability

X6CMS, the full name of Xiaoliu Website Content Management System. X6CMS is a fully functional marketing website management platform with PHP+MYSQL architecture. There is an arbitrary file reading vulnerability in the background of x6cms. An attacker can use this vulnerability to view arbitrary...

Cscms v4.1.8 Command Execution Vulnerability in Backend

Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. Cscms v4.1.8 has a command execution vulnerability in the backend. An attacker can execute php commands by uploading malicious compressed files...

Directory override delete vulnerability in Monstra CMS backend filesmanager.admin.php file

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A directory override vulnerability exists in the filesmanager.admin.php file in the backend of Monstra CMS. A...

Code Execution Vulnerability in POCMS Program Version v3.2.0 Backend

POSCMS System is a content management system based on the CodeIgniter framework. A code execution vulnerability exists in the backend of POCMS program version v3.2.0, which can be exploited by an attacker to execute code and thus gain control of the server...

Remote Command Execution Vulnerability in Finecms V5.3.0 Backend

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A remote command execution vulnerability exists in the backend of Finecms V5.3.0, which can be exploited by an attacker to write Trojan scripts to gain control of the server...

Multiple SQL Injection Vulnerabilities in iZhanCMS v2.1 Backend

Love Station CMS is an open source and free CMS content management system. iZhanCMS v2.1 version of the background there are multiple SQL injection vulnerabilities, attackers can exploit the vulnerability to obtain sensitive database information...

PHPCMS backend has SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the page phpcms/modules/pay/payment.php in the backend of PHPCMS, which can be exploited ...

Code Execution Vulnerability in FineCMS Backend

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A code execution vulnerability exists in the backend of finecms. An attacker can modify the background html template while injecting arbitrary code, resulting in arbitrary code...

Code execution vulnerability in QYKCMS backend down.php page

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. A code execution vulnerability exists in the QYKCMS background down.php page. An attacker can exploit the vulnerability to execute script code and obtain server control privileges...

SQL Injection Vulnerability in XiaoCMS Backend Database.php Page

Based on PHP+Mysql architecture, XiaoCms Enterprise Builder is a small, flexible, simple and easy-to-use lightweight cms. A SQL injection vulnerability exists in the database.php page of XiaoCMS backend. An attacker can exploit this vulnerability to obtain sensitive information from the database...

Code Execution Vulnerabilities in the Backend of Ourphp Website Builder System

Ourphp website building system is a php+mysql website building system. There is a code execution vulnerability in the background of Ourphp website builder v1.7.6, which is caused by the system failing to strictly filter special characters. An attacker can exploit this vulnerability to write...