444 matches found
CVE-2018-16337: Cross-Site Request Forgery (CSRF)
An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save...
PT-2018-13499
Name of the Vulnerable Software and Affected Versions Cscms version 4.1.8 Description An issue was discovered that allows modification of a website's basic configuration via a CSRF vulnerability. This can be exploited through the "upload/admin.php/setting/save" API endpoint. Recommendations For...
cscms V4.1.8 version exists arbitrary file download vulnerability
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. cscms V4.1.8 version of the existence of arbitrary file download vulnerability, attackers can use the vulnerability to download arbitrary files, resulting in system information leakage...
cscms V4.1.8 version of the background of the existence of arbitrary file deletion vulnerability
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. cscms V4.1.8 version of the background of the existence of arbitrary file deletion vulnerability, an attacker can be exploited to cause the entire site to be deleted...
CVE-2018-11527
An issue was discovered in CScms v4.1. A Cross-site request forgery CSRF vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpasssave...
Cross site request forgery (csrf)
An issue was discovered in CScms v4.1. A Cross-site request forgery CSRF vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpasssave...
CVE-2018-11527
An issue was discovered in CScms v4.1. A Cross-site request forgery CSRF vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpasssave...
CVE-2018-11527
An issue was discovered in CScms v4.1. A Cross-site request forgery CSRF vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpasssave...
CVE-2018-11527
CVE-2018-11527 affects CScms v4.1, where a Cross-site request forgery (CSRF) in plugins/sys/admin/Sys.php allows remote attackers to change the administrator’s username and password via /admin.php/sys/editpass_save. Exploitation details are not provided beyond the path, but the vulnerability enab...
PT-2018-10639
Name of the Vulnerable Software and Affected Versions CScms version 4.1 Description A Cross-site request forgery CSRF issue allows remote attackers to change the administrator's username and password via the "admin.php/sys/editpass save" API endpoint. Recommendations For CScms version 4.1, as a...
CVE-2018-11527: Cross-Site Request Forgery (CSRF)
An issue was discovered in CScms v4.1. A Cross-site request forgery CSRF vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpasssave...
Cscms v3.53.5 SQL Injection Vulnerability in Frontend
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. Cscms v3.53.5 has a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive information from the database...
Command Execution Vulnerability in Cscms v3.5 Backend
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. A command execution vulnerability exists in the backend of Cscms v3.5, which allows attackers to remotely execute commands and gain server privileges...
Cscms v4.1.8 Command Execution Vulnerability in Backend
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. Cscms v4.1.8 has a command execution vulnerability in the backend. An attacker can execute php commands by uploading malicious compressed files...
Arbitrary File Deletion Vulnerability in Cscms Version v4.1.8
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. Cscms v4.1.8 has an arbitrary file deletion vulnerability. An attacker can use this vulnerability to delete arbitrary files from the background and violently execute a reinstallation getshell...
File Write Vulnerability in Cscms v4.1.8
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. A file write vulnerability exists in Cscms v4.1.8, which is due to the system failing to effectively filter input parameters and file paths. An attacker can use this vulnerability to inject Trojan...
CSCMS /user/do.php SQL注入漏洞
No description provided by source...