OFCMS backend ueditor uploadScrawl file upload vulnerability

OFCMS is a content management system developed based on java technology. There is a file upload vulnerability in OFCMS backend ueditor uploadScrawl, which can be exploited by attackers to upload webshell and gain server privileges, posing information leakage and operational security risks...

OFCMS Backend SQL Injection Vulnerability

OFCMS is a content management system based on Java technology. A backend SQL injection vulnerability exists in versions of OFCMS prior to 1.1.3. An attacker can exploit the vulnerability to launch admin/system/generate/create?sql= SQL injection attack...

Code Execution Vulnerability in Polyglot CMS Backend

Polygraph cms is an open source content management system CMS. A code execution vulnerability exists in the back-end of JUCOR cms, which can be exploited by attackers to execute arbitrary code...

SQL Injection Vulnerability in Co.MZ Enterprise System v1.1.0 Backend

Co.MZ Enterprise System is a lightweight enterprise website management system. Co.MZ Enterprise System v1.1.0 suffers from a SQL injection vulnerability in the backend. An attacker can exploit the vulnerability to obtain sensitive database information...

File Upload Vulnerability in Super CMS Backend

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

Code execution vulnerability in WMCMS V4.250.513 backend

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS V4.250.513 code execution vulnerability exists in the background, an attacker can use the vulnerability to obtain control of the server...

SQL Injection Vulnerability in Five Fingers CMS v4.1.0 Backend

Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture. Five Fingers CMS v4.1.0 SQL injection vulnerability exists in the background , an attacker can exploit the vulnerability to obtain sensitive information in the database...

SchoolCMS V2.3.1 Code Execution Vulnerability in Backend Se***.cl***.php

SchoolCMS is a school teaching management system based on PHP+MySQL. A code execution vulnerability exists in Schoolcms V2.3.1 backend SeoController.class.php. An attacker can exploit this vulnerability to execute arbitrary code...

Code execution vulnerability in SchoolCMS V2.3.1 backend Sm***.cl***.php

SchoolCMS is a school teaching management system based on PHP+MySQL. A code execution vulnerability exists in the schoolcms backend SmsController.class.php. An attacker can exploit this vulnerability to execute arbitrary code...

SQL Injection Vulnerability in ad***.asp of Qixing Helpdesk System Backend

The Kairos Helpdesk System is a system for dealing with day-to-day issues. A SQL injection vulnerability exists in the backend ad.asp of Qixing Helpdesk System, which can be exploited by attackers to manipulate the database...

SQL Injection Vulnerability in UsualToolCMS 8.0 Release Backend a_re***.php

UsualToolCMS UTCMS is a content management system and rapid site building framework. UsualToolCMS backend are.php suffers from a sql injection vulnerability, which can be exploited by attackers to manipulate the database...

File write vulnerability in MetInfo version 6.1.3 backend

MetInfo is a content management system CMS developed using PHP and Mysql by Changsha Mito Information Technology Co. A file write vulnerability exists in the backend of MetInfo version 6.1.3, which can be exploited by attackers to gain control of the web server...

PHPwind Backend SQL Injection Vulnerability

PHPWind is a set of PHP-based Web forum program . A SQL injection vulnerability exists in the PHPwind backend. An attacker can exploit the vulnerability to execute SQL statements...

Code Execution Vulnerability in LmxCMS V1.4 Backend Te***.cl***.php

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A code execution vulnerability exists in Te.cl.php in the backend of LmxCMS V1.4. An attacker can exploit this vulnerability to launch a remote command...

Mogul Interactive PC Enterprise Website System Backend Exists Vulnerability of Ultra-rights Access

Xi'an Mogul Interactive Technology Co., Ltd. is to provide a series of services for enterprises from website building analysis, web design, website optimization and so on. Xi'an Mogul Interactive Technology Co., Ltd. website building system has a vulnerability of unauthorized access. Attackers ca...

Code execution vulnerability in zzzphp V1.6.0 backend

zzphp is a free website building system developed using PHP. A code execution vulnerability exists in the zzzphp V1.6.0 backend, which can be exploited by an attacker to deposit arbitrary code and execute it...

SQL injection vulnerability in zzzphp V1.6.0 backend sa***.php page

zzphp is a free website building system developed using PHP. zzzphp V1.6.0 SQL injection vulnerability exists in the background sa.php page, which can be exploited by attackers to obtain sensitive information from the database...

Open-Xchange OX App Suite backend component cross-site scripting vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. backend is one of the backend components. A cross-site scripting vulnerability exists in the backend component in...

SQL Injection Vulnerability in Di***.php Page of CloudYou CMS Backend

Yunyou CMS is a professional marketing enterprise building system based on PHP+MYSQL as the core development. SQL injection vulnerability exists in the background Di.php page of CloudUnion CMS, which can be exploited by attackers to obtain sensitive database information...

Code Execution Vulnerabilities in the Backend of Yunyou CMS

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A code execution vulnerability exists in the background of YUNUCMS, which can be exploited by attackers to gain control of the web serve...