Code Execution Vulnerability in UCMS Backend File Management

UCMS is a simple open source content management system. A code execution vulnerability exists in the UCMS backend file management, which can be exploited by an attacker to gain control of the web server...

Vanno enterprise website management system backend file contains a vulnerability

Fanno enterprise website management system is a website construction system developed by Cangzhou City Fanno Advertising Media Co. Vanno enterprise website management system background file contains a vulnerability that can be exploited by attackers to obtain administrator privileges...

S-CMS hospital website building system backend a***.php suffers from SQL injection vulnerability

S-CMS hospital station building system is developed by php+mysql, easy to operate, convenient, support PC+Mobile+WeChat. S-CMS hospital building system background a.php SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

S-CMS enterprise website builder system backend db***.php file has SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the db.php file in the background of S-CMS enterprise website building system. Attackers c...

Code execution vulnerability in 74cms backend Co***.cl***.php file

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Co.cl.php file there is a code execution vulnerability. Allow attacker...

Lmxcms V1.4 SQL Injection Vulnerability in Backend Fie***.php

lmxcms is based on php language and mysql database development, the system is developed using the industry's popular MVC design pattern. Lmxcms V1.4 background Fie.php SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

File upload vulnerability in the background ap***_co***.php file of PHPOK enterprise website building system

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in the apco.php file in the background of the PHPOK enterprise website system. Remote attackers can use this vulnerability to obtain server administrative privileges...

SQL Injection Vulnerability in Vanno cms Backend c**_fe**.p** File

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. Vanno cms background cfe.p file SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in na***_ed***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the backend naed.php of Acme CMS, which can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in co***_ru***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the backend coru.php of Acme CMS, which can be exploited by attackers to obtain sensitive database...

OFCMS backend editUploadImage method has file upload vulnerability

OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the editUploadImage method in the background of OFCMS, which can be exploited by an attacker to upload a webshell and gain access to the server, posing an information leakage and...

SQL Injection Vulnerability in the Backend Us***_Ro***.aspx File of Qixing Image & Video Library Gallery v27.0

Qixing Image & Video GalleryGallery is mainly used to store images or videos in the company. A SQL injection vulnerability exists in the backend UsRo.aspx file of Qixing Image & Video Gallery v27.0, which can be exploited by an attacker to obtain sensitive information from the database...

Qibo CMS station system V7.0 backend file reading vulnerability

Qibo CMS station system is a Guangzhou Qibo Network Technology Co. Qibo CMS system V7.0 backend file reading vulnerability exists. The vulnerability is due to the failure of the user to submit a special string of processing , resulting in directory traversal , an attacker can use the vulnerabilit...

Five Fingers CMS backend co***.php file has SQL injection vulnerability

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS backend co.php file exists SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

SQL injection vulnerability in UsualToolCMS backend a_a***.php file

UsualToolCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. A SQL injection vulnerability exists in the aa.php file in the backend of UsualToolCMS. An attacker can exploit the...

SQL injection vulnerability in OURPHP backend ou***.php file

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP background ou.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10281)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/news.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2018-14975

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS...

CVE-2018-14973

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS...

File upload vulnerability in phpComasy CMS system

phpComasy CMS is a foreign open source content management system, with simple and fast, scalable, is the ideal system for small and medium-sized websites. phpcomasy v2.1.1 A file upload vulnerability exists in the phpcomasy\classes\class.filemanager.php file, which allows an attacker to upload a...