Arbitrary File Deletion Vulnerability in IWebShop CMS Backend

iWebShop is an open source WEB e-commerce B2B2C building system based on the HP language and MYSQL database development , using the MVC architecture Yii framework thinking design mode of a product . IWebShop CMS backend exists arbitrary file deletion vulnerability. Attackers can use this...

Code execution vulnerability in AddonsController.class.php file in backend of Thunderwind Movie CMS v3.3.4

Thunderwind Movie CMS is a PHP based THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. A code execution vulnerability exists in the AddonsController.class.php file in the backend of Thunderwind CMS...

Dedecms V5.7 Backend Co_add.php File Exists SQL Injection Vulnerability

DedeCMS is a PHP open source website management system. A SQL injection vulnerability exists in the Coadd.php file in the backend of Dedecms V5.7. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Multiple Backend Locations in Daimi CMS v5.9.9

DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. A SQL injection vulnerability exists in several places in the backend of DAMI CMS...

SQL Injection Vulnerability in Rice CMS v5.99

DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. There is a SQL injection vulnerability in the back-end of DAMI CMS v5.99, which ca...

File Inclusion Vulnerability in ECShop 2.7.3 Backend

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECShop 2.7.3 version of the backend file...

auxblogcms 1.0.6 Backend Login Bypass Vulnerability

auxblogcms is a php personal blog system based on PHP+MySQL program. auxblogcms 1.0.6 has a background bypass login vulnerability, which can be exploited by attackers to bypass background cookies and obtain sensitive information...

Arbitrary File Deletion Vulnerability in SchoolCMS

SchoolCMS is a school teaching management system based on PHP+MySQL. An arbitrary file deletion vulnerability exists somewhere in the SchoolCMS backend, which can be exploited by an attacker to delete arbitrary folders...

CVE-2015-5699

The Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label...

CVE-2015-5699

The Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label...

Code Execution Vulnerability in PHPCMS v9.6.3

PHPCMS is a web content management system based on PHP and Mysql architecture. A code execution vulnerability exists in the backend of phpcms version v9.6.3, which can be exploited by attackers to gain server privileges...

S-CMS v3.0 build20170911 Authentication Bypass Vulnerability in Backend

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS v3.0 build20170911 authentication bypass vulnerability exists in the background, due to the system fails to accurately verify the cookie information, the attacker can bypass the login authenticatio...

SQL injection vulnerability in OURPHP backend ourphp_callback.php page

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. A SQL injection vulnerability exists in the background ourphpcallback.php page of OURPHP. Attackers can use this vulnerability to obtain sensitive database informatio...

PHPCMS V9.6.3 CSRF Vulnerability and Arbitrary File Write Vulnerability in the Backend

PHPCMS is a web content management system based on PHP and Mysql architecture. PHPcms V9.6.3 version of the backend exists CSRF vulnerability and arbitrary file write vulnerability. Attackers can use this vulnerability to remotely write Trojan horse files to obtain web server administrative...

Code Execution Vulnerability in FineCMS v5.0.8 Public Interest Edition Backend

FineCMS v5.0.8 is a cms for small and medium-sized websites developed by SkyRay programming team. FineCMS v5.0.8 public welfare version of the background there is a code execution vulnerability, remote attackers can take advantage of the vulnerability to insert code, and the code can be parsed...

XSS Vulnerability in NETGEAR FS726Tv2 NETGEAR Backend

The FS726T is a classic smart switch from Netgear. An XSS vulnerability exists in the NETGEAR FS726Tv2 NETGEAR backend. An attacker can exploit the vulnerability to pop up a message in the login box for modification...

Arbitrary File Write Vulnerability in Wolf CMS 0.8.3.1 Backend

Wolf CMS is a lightweight CMS program written in PHP. The latest version of Wolf CMS, version 0.8.3.1, has an arbitrary file write vulnerability in the backend, which can be exploited to create files with arbitrary suffixes and write arbitrary content. An attacker can use this vulnerability to...

File Write Vulnerability in tpshop2.0 Backend

TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . tpshop2.0 background file write vulnerability allows attackers to exploit the vulnerability to write arbitrary files...

TPshop 2.0 Backend SQL Injection Vulnerability in Multiple Different Page Parameters

TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . TPshop 2.0 background parameters of a number of different pages mobile, id and orderby the existence of SQL injection leaks , allowing...

finecms has a csrf vulnerability

FineCMS is a content management system based on PHP+MySql. A CSRF vulnerability exists in the finecms backend form for executing SQL, which can be exploited by attackers to trick administrators into clicking on a malicious link to execute SQL statements and write a webshell to gain server...