Arbitrary File Deletion Vulnerability in CLTPHP Backend

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. An arbitrary file deletion vulnerability exists in the CLTPHP backend. An attacker can exploit the vulnerability to delete arbitrary files...

Command Execution Vulnerability in Ocean CMS Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. An arbitrary command execution vulnerability exists in the backend of Ocean CMS. An attacker can exploit this vulnerability to gain control of the web server...

File upload vulnerability in CLTPHP backend

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. A file upload vulnerability exists in the CLTPHP backend. An attacker can exploit the vulnerability to write php files and gain server privileges...

Arbitrary File Deletion Vulnerability in SeaCMS Backend

SeaCMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. An arbitrary file deletion vulnerability exists in the SeaCMS backend. An attacker can exploit this vulnerability to delete arbitrary files on the web server...

Command Execution Vulnerability in Ocean CMS Backend (CNVD-2020-23723)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. An arbitrary command execution vulnerability exists in the backend of Ocean CMS. An attacker can exploit this vulnerability to gain control of the web server...

The Internet Avoided a Minor Disaster Last Week

A tiny backend bug at Let’s Encrypt almost broke millions of websites. A five-day scramble ensured it didn’t...

Visma Bug Bounty Program: [IDOR]Ability to Pause & Resume the Invoice of other users If GUID is known.

Insecure Direct Object Reference IDOR vulnerability is discovered via a certain endpoint and the application exposes a reference to an internal implementation object. It reveals the real identifier and format/pattern used of the element in the storage backend side...

Joyplus CMS suffers from an arbitrary file deletion vulnerability (CNVD-2020-21947)

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . Joyplus CMS has an arbitrary file deletion...

Joyplus CMS suffers from SQL injection vulnerability (CNVD-2020-21950)

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . Joyplus CMS has a SQL injection vulnerability , a...

Joyplus CMS suffers from SQL Injection Vulnerability

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . Joyplus CMS has a SQL injection vulnerability ,...

File Upload Vulnerability in LaiKe Full Scene E-commerce System

LaiKe full-scene e-commerce system is a WeChat applet e-commerce platform front and back end open source PHP , including distribution , group , lottery , red packets , nine-grid game and other functions , the entire system architecture is very simple , suitable for small teams or individual...

File Containment Vulnerability in the Backend of the Most Earth Group Buying System

The most earth group-buying system is the most professional and powerful GroupOn mode of free open source group-buying system platform. The most earth group purchase system backend file contains a vulnerability that can be exploited by attackers to obtain server information...

Visma Bug Bounty Program: Administration page visible without authentication

A backend system administration interface could be accessed without authorization, but it did not display any data unless the user was correctly logged in...

SQL Injection Vulnerability in seacms Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A SQL injection vulnerability exists in the seacms backend. An attacker can exploit this vulnerability to gain control of the web server...

Command Execution Vulnerability in seacms Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the seacms backend. An attacker can exploit this vulnerability to gain control of the web server...

Directory traversal vulnerability in seacms backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A directory traversal vulnerability exists in the seacms backend, which is exploited by remote attackers to read arbitrary files...

Command Execution Vulnerability in seacms Backend

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. A code execution vulnerability exists in the backend of seacms, which can be exploited by attackers to execute malicious code...

HackerOne: Mismatch between frontend and backend validation via `ban_researcher` leads to H1 support and hackers email spam

Summary: We found a mismatch between the frontend and backend validation when using the ban researcher feature, available for program customer. Description: When a program customer issues a ban, an automatic email will be send both to the banned user and H1 support. The problem is that fronted wi...

SharePoint Workflows XOML Injection

This module exploits a vulnerability within SharePoint and its .NET backend that allows an attacker to execute commands using specially crafted XOML data sent to SharePoint via the Workflows functionality. Module Options msf use exploit/windows/http/sharepoint/workflowsxoml msf...

File Upload Vulnerability in ShopXO Backend

ShopXO is an open source PHP e-commerce system based on ThinkPHP 5.1. There is a file upload vulnerability in the ShopXO backend, which can be exploited by attackers to gain access to the site's administrative privileges...