10854 matches found
SQL injection vulnerability in beescm backend ad***_as***.php file
BEESCMS is a PHP+MYSQL architecture, multi-language system, easy to expand the content module, diversified template styles, can meet the corporate website, foreign trade websites, institutions, educational institutions, personal websites. There is a SQL injection vulnerability in the adas.php fil...
SQL injection vulnerability in beescm backend ad***_fl***.php file
BEESCMS is PHP+MYSQL architecture, multi-language system, easy to expand content modules, diversified template styles, simple and powerful template production, professional SEO optimization, easy to operate the background, fully meet the corporate website, foreign trade websites, institutions,...
UQCMS Cloud Business - B2B2C system backend has a logic flaw vulnerability
UQCMS Cloud Business-B2B2C System Multi-merchant e-commerce system is a B2B2C e-commerce software. UQCMS Cloud Merchant-B2B2C System has a logic flaw vulnerability in the background, which can be exploited by an attacker to bypass login privileges for administrator operations...
Denial Of Service (DoS)
spacewalk-backend is vulnerable to denial of service. It was found that a remote attacker could upload packages to an RHN Satellite server's NULL organization without any authorization or authentication. The NULL organization stores packages synced from RHN Hosted. Although an attacker cannot put...
Information Disclosure
spacewalk-backend is vulnerable to information disclosure. The vulnerability exists when a user submitted a system registration XML-RPC call to an RHN Satellite server for example, by running "rhnregks" and that call failed, their RHN user password was included in plain text in the error messages...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as the absence of sanity-checks was found in the hypervisor block backend driver, when running 32-bit paravirtualized guests on a 64-bit host. The number of blocks to be processed per one request from guest to host, or...
Arbitrary Code Execution
xen is vulnerable to arbitrary code execution. The hypervisor's para-virtualized framebuffer PVFB backend failed to validate the format of messages serving to update the contents of the framebuffer. This could allow a malicious user to cause a denial of service, or compromise the privileged domai...
SQL Injection Vulnerability in iwebsns Backend of Jinan Digital Open Network Technology Co.
iWebSNS, a new generation of SNS software based on a full marketing technology architecture system, is built on the new LAMP marketing CMS development framework. There is a SQL injection vulnerability in the background of iwebsns of Jinan Digital Open Network Technology Co., Ltd. which can be...
File Upload Vulnerability in MetInfo Backend
MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo backend file upload vulnerability can be exploited by attackers to upload malicious files and obtain site administration privileges...
SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25102)
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ZZCMS team's backend ztse.php file, which can be exploited by an attacker to obtain sensitive information from the database...
SQL Injection Vulnerability in ZZCMS Backend de***.php File
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the de.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in ZZCMS Backend dl_se***l.php File
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the dlsel.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in ZZCMS Backend ba***.php File
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ba.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in ZZCMS Backend dl_se***.php Page
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the dlse.php page in the background of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25324)
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ztse.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
Arbitrary File Read Vulnerability in the Background of Feifei Movie Navigation System
Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. An arbitrary file read vulnerability exists in the background of Feifei Movie & TV Navigation System, which can be exploited by attackers to compromise confidentiality...
Arbitrary File Deletion Vulnerability in the Backend of Feifei Movie Navigation System (CNVD-2020-25318)
Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. Feifei Movie and TV navigation system background there are arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any file server...
SQL Injection Vulnerability in ZZCMS Backend zt***_se***.php File
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ztse.php file in the backend of ZZCMS, which can be exploited by attackers to obtain sensitive information from the database...
File Upload Vulnerability in Extreme CMS Backend
Extreme CMS is open source and free PHPCMS web content management system. There is a file upload vulnerability in the backend of Extreme CMS, which can be exploited by attackers to upload malicious files and gain administrative privileges on the server...
