SQL Injection Vulnerability in YzmCMS Backend da***.cl***.php

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS backend da.cl.php has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the...

Arbitrary File Deletion Vulnerability in ShopXO Backend

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO backend arbitrary file deletion vulnerability exists . An attacker can exploit the vulnerability to delete any file with a php suffix...

File upload vulnerability in UsualToolCMS backend a***_te***.php file

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. A file upload vulnerability exists in the UsualToolCMS backend ate.php file. An attacker can exploit this vulnerability to gain server privileges...

SQL injection vulnerability in UsualToolCMS backend a***_te***.php

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the backend ate.php of UsualToolCMS. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in UsualToolCMS backend a***_bo***_ca***.php file

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the UsualToolCMS backend aboca.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in DuomiCms Backend

Duomi DuomiCms film and television management system is a set of video on demand system designed for film and television station owners, using PHP + MYSQL architecture, native PHP code to bring excellent access speed and load capacity. DuomiCms backend has SQL injection vulnerability, attackers c...

Command Execution Vulnerability in zzzzphp Backend

zzphp use PHP+mysql/access/sqlite free building station whole system, support cell phone automatic synchronization. There is a command execution vulnerability in the background of zzzphp. An attacker can exploit the vulnerability to execute commands and gain server privileges...

S-CMS enterprise website builder system backend aj***.p*** C*** parameter has SQL injection vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS enterprise station building system background aj.p C parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in ask2 Q&A system backend (CNVD-2019-30155)

ASK2 Q&A is an open source PHP Q&A program. There is a SQL injection vulnerability in the backend of ask2 Q&A System, which can be exploited by attackers to obtain sensitive information about the database...

SemCMS foreign trade website backend has SQL injection vulnerability

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. semcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SQL injection vulnerability in zzcms backend (CNVD-2019-30314)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the backend of zzcms, which can be exploited by attackers to obtain sensitive information from the database...

Command Execution Vulnerability in NetShow CMS Backend

Nethub Chinese and English enterprise website management system focuses on the production of enterprise website templates, providing high-quality enterprise website templates for small and medium-sized enterprises. A command execution vulnerability exists in the backend of Nethub CMS, which can b...

Dedecms backend has arbitrary file reading vulnerability

Dream Content Management System DedeCMS is a PHP open source website management system. Dedecms backend exists arbitrary file read vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in VANOC Enterprise Website Management System Backend

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. VANOC enterprise website management system backend has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database information...

Code execution vulnerability in UsualToolCMS backend a_la***.php file

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. A code execution vulnerability exists in the UsualToolCMS backend ala.php file. An attacker can exploit this vulnerability to execute arbitrary code...

YzmCMS v5.3 backend co***_co***.cl***.p*** file has arbitrary file read vulnerability

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS v5.3 backend coco.cl.p file there is an arbitrary file reading vulnerability , an attacker can use this vulnerability to obtain...

File Upload Vulnerability in the Backstage of Website Star of Shanghai Meicang Technology Information Development Co.

Ltd., is a cloud computing-based Internet application service provider. There is a file uploading vulnerability in the background of Shanghai Meicang Technology and Information Development Co...

SQL Injection Vulnerability in SDCMS Backend

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDCMS background SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

File Upload Vulnerability in Panavision e-message Backend

Panavision e-message is an instant messaging software for business users. A file upload vulnerability exists in the backend of Panmicro e-message. An attacker can exploit this vulnerability to gain control of the web server...

Command Execution Vulnerability in ctcms 2.0.2 Backend

Chong Sheng Network Technology has developed Cscms Portal Content Management System, Ctcms Network Video Education Management System, Aggregate Payment, and a Multi-Merchant Entry Card Issuing Platform Management System. A command execution vulnerability exists in the ctcms 2.0.2 backend, which c...