Arbitrary File Deletion Vulnerability in Extreme CMS Backend

Extreme CMS is an open source and free PHPCMS web content management system. An arbitrary file deletion vulnerability exists in the backend of Extreme CMS, which can be exploited by attackers to compromise the integrity of the system...

Command execution vulnerability in Zendo Enterprise 4.0.3 backend

Zendo Enterprise is a project management software. A command execution vulnerability exists in the backend of Zendo Enterprise Edition 4.0.3, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in LzCMS Content Management System Backend

LzCMS is a simple blog system made by ThinkPHP+layui. A command execution vulnerability exists in the backend of LzCMS content management system. Attackers can use this vulnerability to upload Trojan horse files and obtain webshell...

Command Execution Vulnerability in Renren CMS Backend

Renren CMS is a new core and open source free PHP enterprise website development and construction management system , is a set of PHP CMS source code , to meet the needs of various types of enterprise website development and construction . A command execution vulnerability exists in the backgroun...

Command Execution Vulnerability in the Backend of Netizen's Chinese and English Enterprise Website Management System

Netizen Chinese and English enterprise website management system is developed using PHP + MYSQL technology and MVC mode, code is easy to maintain, support for pseudo-static function, can generate google and baidu maps, support for customizing url, keywords and descriptions, in line with SEO...

SQL Injection Vulnerability in ad***.php file of Miku CMS Movie & TV System Backend

Miku CMS Movie & TV System is a movie & TV management system designed for different needs of webmasters. A SQL injection vulnerability exists in the ad.php file in the background of Miku CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in WeiPHP5.0 of Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source, efficient, simple microsoft development platform, it is based on oneThink, a simple and powerful content management framework to realize. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP5.0 backend SQL injection vulnerability, attackers can use the vulnerability to obtai...

Jiangxi Minsoft Technology Co., Ltd. MCms background exists arbitrary file deletion vulnerability

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms back-end arbitrary file deletion vulnerability, an attacker can us...

Command execution vulnerability in PHPEMS backend (CNVD-2020-64558)

PHPEMS is an open source Chinese online examination system, the system is based on PHP for development, is a collection of online exams, video playback and other functions, on the operation of the simple domestic boutique system. PHPEMS backend command execution vulnerability , attackers can use...

SQL injection vulnerability in the do***_ca***.cl***.php file in the background of the MTCEO repository system

MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system background doca.cl.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

File Upload Vulnerability in duxcms Content Management System Backend

DuxCms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. A file upload vulnerability exists in the backend of duxcms content management system, which can be exploited by attackers to obtain server administrati...

Command Execution Vulnerability in flatCore CMS Backend

flatCore CMS is a web content management system CMS based on PHP5 and SQLite3. A command executionl vulnerability exists in the backend of flatCore CMS. An attacker can exploit the vulnerability to execute arbitrary code...

Logic Flaw Vulnerability in the Backend of Zhirui Admission and Registration System

Zhirui admission query enrollment system is the positioning of education enrollment development of the system, specializing in colleges and universities, vocational and technical schools, training colleges and universities and private education, training institutions to develop enrollment and...

Command execution vulnerability in the backend of more than 100 systems shipped

Shipping 100 is a virtual goods automatic shipping system / article pay to read system, without human guards, customers can buy online to automatically complete the transaction. A command execution vulnerability exists in the backend of several Shipment 100 systems. Attackers can use the...

SQL Injection Vulnerability in ZZCMS2020 Backend

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59405)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59315)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59398)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59314)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59411)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...