SQL Injection Vulnerability in ZZCMS Backend ba***.php File

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ba.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Read Vulnerability in the Background of Feifei Movie Navigation System

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. An arbitrary file read vulnerability exists in the background of Feifei Movie & TV Navigation System, which can be exploited by attackers to compromise confidentiality...

Arbitrary File Deletion Vulnerability in the Backend of Feifei Movie Navigation System (CNVD-2020-25318)

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. Feifei Movie and TV navigation system background there are arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any file server...

Xionghai CMS v1.0 SQL Injection Vulnerability in Background

XIONGHAI CMS is a comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS v1.0 there is a SQL injection vulnerability in the background, attackers can use the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in Heybbs Backend ad**.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background ad.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

QCMS is vulnerable to XSS

QCMS website management system is a PHP lightweight system developed through MVC architecture. An XSS vulnerability exists in the QCMS backend, which can be exploited by attackers to obtain user login credentials...

File Upload Vulnerability in the Backend of UWA Universal Building System

UWA is a general-purpose website builder based on PHP and MySQL. UWA general-purpose site-building system background file upload vulnerability , the vulnerability is due to the UWA background allows customized php template files , and in the saving of the content of the PHP file does not do the...

Arbitrary File Deletion Vulnerability in ShopXO Backend

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO backend arbitrary file deletion vulnerability exists. Attackers can use the vulnerability to delete arbitrary files , resulting in a system crash , program reinstallation...

Arbitrary File Deletion Vulnerability in CLTPHP Backend

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. An arbitrary file deletion vulnerability exists in the CLTPHP backend. An attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary File Deletion Vulnerability in SeaCMS Backend

SeaCMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. An arbitrary file deletion vulnerability exists in the SeaCMS backend. An attacker can exploit this vulnerability to delete arbitrary files on the web server...

Command Execution Vulnerability in Ocean CMS Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. An arbitrary command execution vulnerability exists in the backend of Ocean CMS. An attacker can exploit this vulnerability to gain control of the web server...

File Containment Vulnerability in the Backend of the Most Earth Group Buying System

The most earth group-buying system is the most professional and powerful GroupOn mode of free open source group-buying system platform. The most earth group purchase system backend file contains a vulnerability that can be exploited by attackers to obtain server information...

Command Execution Vulnerability in seacms Backend

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. A code execution vulnerability exists in the backend of seacms, which can be exploited by attackers to execute malicious code...

File Upload Vulnerability in ShopXO Backend

ShopXO is an open source PHP e-commerce system based on ThinkPHP 5.1. There is a file upload vulnerability in the ShopXO backend, which can be exploited by attackers to gain access to the site's administrative privileges...

SQL Injection Vulnerability in YouDianCMS Backend

YouDianCMS is an enterprise website management system developed by Changsha YouDian Software Technology Co. YouDianCMSv8.0 has a SQL injection vulnerability in the background. Attackers can use the vulnerability to obtain, modify, delete database information, obtain server privileges and other...

File deletion vulnerability in ourphp v1.9.1 backend

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. ourphp v1.9.1 arbitrary file deletion vulnerability exists in the background. Attackers can use this vulnerability to delete website files, the integrity of...

File Upload Vulnerability in YouDianCMS v8.0 Backend

Youdiancms Enterprise Website Management System is an enterprise website building system developed by Changsha Youdian Software Technology Co. YouDianCMS v8.0 has a file upload vulnerability, which can be exploited by an attacker to directly obtain server information, permissions, and so on...

Command Execution Vulnerability in the Backend of siyucms Content Management System of Shenyang Dotcom Technology Co.

SIYUCMS is based on the latest version of ThinkPHP-5.1.X framework, the backend front-end framework using AdminLTE. the core concept of the system is " do the most suitable for the enterprise CMS ". Shenyang point to move Technology Co. siyucms content management system backend there is a command...

SQL Injection Vulnerability in ZhiCms Backend

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CatfishCMS Backend File Arbitrary Deletion Vulnerability

CatfishCMS is open source and free PHP CMS web content management system. An arbitrary file deletion vulnerability exists in the CatfishCMS backend. An attacker can exploit the vulnerability to delete arbitrary files...