Command execution vulnerability in the backend of the Guojiz international web site navigation system (CNVD-2021-12802)

Guojiz International Website Navigation System is developed with ThinkPHP5.0 PHP7.0 Mysql Apache/Nginx/iis, a CMS program suitable for small and medium-sized webmasters to build websites. Guojiz international web site navigation system back-end command execution vulnerability, an attacker can use...

Exploit for Improper Authentication in Projectsend

This repository contains the description of the vulnerability fo...

SQL injection vulnerability in miku cms backend cm***_bo***_ed***.php file

Miku cms is a movie and TV management system designed for webmasters with different needs. A SQL injection vulnerability exists in the cmboed.php file in the backend of Miku cms. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Weak Password Vulnerability in the Backend of NetSense SecBMS 3600 Bandwidth Management System

NetShen Information Technology Beijing Co., Ltd. specializes in network and information security. A weak password vulnerability exists in the backend of NetShen SecBMS 3600 Bandwidth Management System, which can be exploited by an attacker to log in to the system with a weak password and perform...

SQL Injection Vulnerability in AikCms Backend

AikCms is a lightweight CMS. An SQL injection vulnerability exists in the backend of AikCms. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the Backend of Miku CMS Movie and TV System

Miku CMS Movie & TV System is a movie & TV management system designed for different needs of webmasters. A SQL injection vulnerability exists in the backend of Miku CMS, which can be exploited by attackers to obtain sensitive information from the database...

File upload vulnerability in AikCms backend vi***_ad***.php page

AikCms is a lightweight CMS. A file upload vulnerability exists in the AikCms backend viad.php page, which can be exploited by an attacker to upload a webshell and gain server privileges...

File upload vulnerability in DedeCMSV6 backend fi***_na***_co***.php file

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A file upload vulnerability exists in the DedeCMSV6 backend finaco.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SQL Injection Vulnerability in the Backend of Arsenal CMS (CNVD-2020-70791)

Jingxun CMS is a website construction and management system independently developed by Taizhou Jingxun Information Technology Co. A SQL injection vulnerability exists in the back-end of the CMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Command Execution Vulnerability in Zendo Backend

Zendo is a homegrown open source project management software. A command execution vulnerability exists in the Zendo backend. An attacker can exploit this vulnerability to gain server privileges...

SQL Injection Vulnerability in the background of Wild Rain Novel CMS

Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. There is a SQL injection vulnerability in the background of KYXSCMS. Attackers can use the vulnerability to obtain sensitive information in the database...

Arbitrary File Deletion Vulnerability in Extreme CMS Backend

Extreme CMS is an open source and free PHPCMS web content management system. An arbitrary file deletion vulnerability exists in the backend of Extreme CMS, which can be exploited by attackers to compromise the integrity of the system...

Command execution vulnerability in Zendo Enterprise 4.0.3 backend

Zendo Enterprise is a project management software. A command execution vulnerability exists in the backend of Zendo Enterprise Edition 4.0.3, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in LzCMS Content Management System Backend

LzCMS is a simple blog system made by ThinkPHP+layui. A command execution vulnerability exists in the backend of LzCMS content management system. Attackers can use this vulnerability to upload Trojan horse files and obtain webshell...

Command Execution Vulnerability in Renren CMS Backend

Renren CMS is a new core and open source free PHP enterprise website development and construction management system , is a set of PHP CMS source code , to meet the needs of various types of enterprise website development and construction . A command execution vulnerability exists in the backgroun...

Command Execution Vulnerability in the Backend of Netizen's Chinese and English Enterprise Website Management System

Netizen Chinese and English enterprise website management system is developed using PHP + MYSQL technology and MVC mode, code is easy to maintain, support for pseudo-static function, can generate google and baidu maps, support for customizing url, keywords and descriptions, in line with SEO...

SQL Injection Vulnerability in ad***.php file of Miku CMS Movie & TV System Backend

Miku CMS Movie & TV System is a movie & TV management system designed for different needs of webmasters. A SQL injection vulnerability exists in the ad.php file in the background of Miku CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in WeiPHP5.0 of Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source, efficient, simple microsoft development platform, it is based on oneThink, a simple and powerful content management framework to realize. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP5.0 backend SQL injection vulnerability, attackers can use the vulnerability to obtai...

Jiangxi Minsoft Technology Co., Ltd. MCms background exists arbitrary file deletion vulnerability

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms back-end arbitrary file deletion vulnerability, an attacker can us...

Command execution vulnerability in PHPEMS backend (CNVD-2020-64558)

PHPEMS is an open source Chinese online examination system, the system is based on PHP for development, is a collection of online exams, video playback and other functions, on the operation of the simple domestic boutique system. PHPEMS backend command execution vulnerability , attackers can use...