File Upload Vulnerability in Big Ant Instant Messaging Backend

Big Ant Instant Messenger Soft is a powerful enterprise office communication software. A file upload vulnerability exists in the backend of BigAnt Instant Messenger, which can be exploited by attackers to gain server privileges...

SQL injection vulnerability in the backend of Shield Spirit Original Article Submission System 1.0 (CNVD-2020-58381)

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Shield Spirit Original Article Submission System 1.0 Backend

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

File Inclusion Vulnerability in CupCMS Backend

CUPCMS cup content management system integrated video, stars, news, comics, community and other features. A file inclusion vulnerability exists in the CupCMS backend, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in CMS Backend

High Fives CMS is a free database-free CMS system. A file upload vulnerability exists in the backend of High Fives CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Directory Traversal Vulnerability in Xunrui CMS 4.3.11 Backend

Xunrui CMS system is a free, simple, efficient and flexible PHP content management system. A directory traversal vulnerability exists in the backend of XunRui CMS 4.3.11, which can be exploited by an attacker to traverse the server's directory information with permissions...

Arbitrary file read vulnerability in S-CMS backend (CNVD-2020-57394)

S-CMS Government Station Building System, S-CMS School Station Building System, S-CMS News Portal System and S-CMS Enterprise Station Building System are developed by Zibo Shining Network Technology Co., Ltd. which is specialized in providing solutions for government station building.S-CMS Hospit...

SQL Injection Vulnerability in YCCMS Backend (CNVD-2020-53330)

YCCMS is a PHP version of a lightweight CMS builder. There is a SQL injection vulnerability in the background of YCCMS, which can be exploited by attackers to obtain sensitive database information...

Command Execution Vulnerability in Empire CMS v7.5 Backend

EmpireCMS Empire Content Management System is an open source content management system CMS. A command execution vulnerability exists in the Empire CMS v7.5 backend, which can be exploited by an attacker to gain access to the web server...

TPshop open source mall management backend System page there are arbitrary file deletion vulnerability

TPshop open source mall is developed with the latest version of ThinkPHP shop mall. TPshop open source mall management backend System page there are arbitrary file vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...

Command Execution Vulnerability in UsualToolCMS Backend

UsualToolCMS UTCMS is a content management system and rapid site building framework. A command execution vulnerability exists in the backend of UsualToolCMS, which can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in CMS Backend of Luoyang Yunye Information Technology Co.

Yunye CMS enterprise building system is a php open source cms specialized in small and medium-sized enterprise website construction. Luoyang Yunye Information Technology Co., Ltd. Yunye CMS background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive informatio...

Code Execution Vulnerability in KiteCMS Backend

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development , applicable to individuals and enterprises to quickly build stations and development needs. Provide website templates for various industries , the system uses a...

MacCMS has a file upload vulnerability

MacCMS is a cms website builder system. There is a file upload vulnerability in the MacCMS backend that allows attackers to utilize a self-constructed zip file upload trojan...

Command Execution Vulnerability in Espcms P8 Backend of Honghu Erchuang Netlink Information Technology Co.

ESPCMS-P8 enterprise station management system using PHP + MySQL development, after 6 generations of development, the current ESPCMS-P8 platform stability and can be developed independently of the maturity of the platform, which supports enterprise news and product releases, talent recruitment,...

Command Execution Vulnerability in Ocean CMS Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the backend of Ocean CMS. An attacker can exploit this vulnerability to gain control of the web server...

SQL Injection Vulnerability in YzmCMS Backend or***.cl***.php

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A SQL injection vulnerability exists in YzmCMS backend or.cl.php. Attackers can use the vulnerability to obtain sensitive information ...

Directory traversal vulnerability in ESPCMS backend Te***.php file

ESPCMS is a content management system CMS based on PHP and MySQL. A directory traversal vulnerability exists in the ESPCMS backend Te.php file. An attacker can exploit the vulnerability to obtain sensitive information...

Command Execution Vulnerability in EyouCms Backend

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms backend has a command execution vulnerability. An attacker can exploit the vulnerability to execute commands and gain server privileges...

SQL Injection Vulnerability in NetShow CMS Backend

Netspan CMS is a website management system developed by Netspan Technology. SQL injection vulnerability exists in the backend of Nethub CMS, which can be exploited by attackers to obtain sensitive information from the database...