Remote code execution vulnerability in ECShop backend in***.php file

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECShop background in.php file remote code...

Command Execution Vulnerability in the Backend of the Qibo Classification Information System

Zibo classification information system is an open source content management system. A command execution vulnerability exists in the backend of Qibo Classified Information System. An attacker can exploit the vulnerability to execute commands and gain server privileges...

File Upload Vulnerability in Jeecms v9.3 Backend

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

Code execution vulnerability in ECShop backend ed***_la***.php file

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECShop backend edla.php file code execution...

Command Execution Vulnerability in XYHCMS Backend Sy***.cl***.php File

XYHCMS Xingyunhai CMS is a completely open source CMS content management system. A command execution vulnerability exists in the XYHCMS backend Sy.cl.php file. Attackers can use the vulnerability to obtain control of the server...

Information disclosure in the Contao backend

Impact Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them. Patches Update to Contao 4.4.46 or 4.8.6. Workarounds None. References https://contao.org/en/security-advisories/information-disclosure-in-the-back-end For more information If...

GHSA-4MVC-QC5W-V5QR Information disclosure in the Contao backend

Impact Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them. Patches Update to Contao 4.4.46 or 4.8.6. Workarounds None. References https://contao.org/en/security-advisories/information-disclosure-in-the-back-end For more information If...

Design/Logic Flaw

Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users can manipulate the details view URL to show pages and articles that have not been enabled for them...

SQL Injection Vulnerability in Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

Remote Code Execution Vulnerability in ECShop Backend

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. A remote code execution vulnerability exists ...

Cross-Site Scripting Vulnerabilities in File Upload Handling

TYPO3 allows to upload files either in the backend user interface as well as in custom developed extensions. To reduce the possibility to upload potential malicious code TYPO3 uses the fileDenyPattern to deny e.g. user submitted PHP scripts from being persisted. Besides that it is possible for an...

Cross-Site Scripting in Filelist Module

It has been discovered that the output table listing in the “Files” backend module is vulnerable to cross-site scripting when a file extension contains malicious sequences...

Remote code execution vulnerability in ECShop backend te***.php file

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECShop background te.php file remote code...

Cross-Site Scripting in Link Handling

It has been discovered that t3:// URL handling and typolink functionality are vulnerable to cross-site scripting. Not only regular backend forms are affected but also frontend extensions which use the rendering with typolink...

Code execution vulnerability in seacms backend

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a code execution vulnerability in the backend of seacms, which can be exploited by attackers to execute malicious code...

SQL injection vulnerability in oceancms backend ad***_pa***.php file

Ocean CMS is a video-on-demand system. Ocean cms background adpa.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

Command Execution Vulnerability in PbootCMS V2.0.3 Backend

PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system , is a set of free commercial PHP CMS source code , to meet the needs of enterprise website development and construction . A command execution vulnerability exists in the...

openSUSE Security Update : opera (openSUSE-2019-2107)

This update for opera fixes the following issues : Opera was updated to version 63.0.3368.66 : - CHR-7525 Update chromium on desktop-stable-76-3368 to 76.0.3809.132 - DNA-74031 Download indicator doesnt match progress - DNA-77042 Something went wrong message in crypto wallet in private window -...

Command Execution Vulnerability in EyouCms Backend

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms backend command execution vulnerability , attackers can use the vulnerability to modify the template at the existence of getshell vulnerability , you can execute any PHP code...

5iSNS Content Payment System 1.0.9 suffers from XSS vulnerability

The 5iSNS content payment system integrates functional modules such as post articles and documents with social features. An XSS vulnerability exists in 5iSNS Paid-for-Content System 1.0.9, which can be exploited by an attacker to obtain administrator cookie information and log into the backend of...