Multiple SQL Injection Vulnerabilities in DM Enterprise Website System Backend

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website building system background there are multiple SQL injection vulnerabilities. Attackers can use the vulnerability to...

Jinwei cell phone mall system backend existence of arbitrary file deletion vulnerability

Jinwei Mobile Mall is a mall management system for micro-business customers with public numbers. There is an arbitrary file deletion vulnerability in the background of the Jinwei Mobile Mall system. An attacker can use this vulnerability to traverse the files in any directory and delete any file ...

SQL Injection Vulnerability in SiteServer CMS Backend

SiteServer CMS is an open source and free enterprise-level CMS system developed by Beijing Baiyong Qianwei Software Technology Development Co. A SQL injection vulnerability exists in the backend of SiteServer CMS. An attacker can exploit the vulnerability to obtain sensitive information in the...

File upload vulnerability in beescms backend

BEESCMS is a scalable content management system CMS based on PHP and MySQL. A file upload vulnerability exists in the beescms backend. An attacker can exploit the vulnerability to upload malicious files and gain server privileges...

File upload vulnerability in Extreme CMS backend (CNVD-2020-33342)

Extreme CMS is an open source and free PHPCMS web content management system. A file upload vulnerability exists in the backend of Extreme CMS. Attackers can use the vulnerability to upload webshell and gain server privileges...

Command Execution Vulnerability in PHPOK Backend

PHPOK system hereinafter referred to as OK system is a content management system for website construction developed by Shenzhen Kunshu Technology Co. A command execution vulnerability exists in the backend of PHPOK, which can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in Ocean CMS Backend (CNVD-2020-33136)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. There is a SQL injection vulnerability in the backend of Ocean CMS, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Ocean CMS Backend (CNVD-2020-33135)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. There is a SQL injection vulnerability in the backend of Ocean CMS, which can be exploited by attackers to obtain sensitive database information...

Command Execution Vulnerability in Ocean CMS Backend (CNVD-2020-33132)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the backend of Ocean CMS, which can be exploited by attackers to gain control of the web server...

SQL Injection Vulnerability in Ocean CMS Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. There is a SQL injection vulnerability in the backend of Ocean CMS, which can be exploited by attackers to obtain sensitive database information...

Code Execution Vulnerability in the Backend of Daimi CMS

DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A code execution vulnerability exists in the background of Daimi CMS, which can be exploited by attackers to gain server privileges...

KKCMS backend suffers from sql injection vulnerability

kkcms is an open source video capture and playback system. KKCMS backend suffers from sql injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

PT-2020-12529 · Typo3 · Typo3/Cms

Name of the Vulnerable Software and Affected Versions: TYPO3 CMS versions 9.0.0 through 9.5.16 TYPO3 CMS versions 10.0.0 through 10.4.1 Description: A same-site request forgery vulnerability has been discovered in the backend user interface and install tool of TYPO3 CMS. This vulnerability can be...

Code execution vulnerability in imcat backend

Intimate cat imcat is a PHP + MySQL architecture and design of a general-purpose website system, simple, lightweight, practical, sharing, permanent open source free of charge. imcat backend code execution vulnerabilities exist. Attackers can exploit the vulnerability to execute arbitrary code...

File Upload Vulnerability in Kangbang Smart Campus Backend

Beijing Kangbang Technology Co., Ltd. is a well-known education technology service group in China, and is a leading enterprise in the field of intelligent education in China. A file upload vulnerability exists in the background of Kangbang Smart Campus, which can be exploited by attackers to gain...

SQL Injection Vulnerability in the Backend of Tongda OA Collaboration Office System 2017 Version

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

File renaming vulnerability in the background of YidaCMS Yida building system (CNVD-2020-27481)

YidaCMS website management system is a simple, practical and efficient website builder. YidaCMS YidaCMS website builder system backend file renaming vulnerability, an attacker can exploit the vulnerability to obtain control of the server...

UQCMS Cloud Business - B2B2C system backend has a logic flaw vulnerability

UQCMS Cloud Business-B2B2C System Multi-merchant e-commerce system is a B2B2C e-commerce software. UQCMS Cloud Merchant-B2B2C System has a logic flaw vulnerability in the background, which can be exploited by an attacker to bypass login privileges for administrator operations...

SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25102)

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ZZCMS team's backend ztse.php file, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS Backend zt***_se***.php File

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ztse.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...