CVE-2021-42644

cmseasy V7.7.520211012 is affected by an arbitrary file read vulnerability. After login, the configuration file information of the website such as the database configuration file config / configdatabase can be read through this vulnerability...

CVE-2021-42644

CVE-2021-42644 concerns CmsEasy, affected by an arbitrary file read vulnerability in version 7.7.5_20211012. The issue allows reading critical configuration data, including the website’s database configuration file (config / config_database), after authentication. The provided sources indicate th...

CVE-2021-42643

cmseasy V7.7.520211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PHP script file is written to the website server, and accessing this file can lead to a code execution vulnerability...

CVE-2021-42643

CVE-2021-42643 affects CmsEasy cmseasy v7.7.5_20211012 with an arbitrary file write vulnerability that allows writing a PHP script to the web server and, when accessed, can lead to code execution. This is documented across NVD/NVD-derived pages and CNNVD describing the same issue. The supplied co...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou eTong Technology Company. A security vulnerability exists in CmsEasy version 7.7.520211012, which stems from being affected by an arbitrary file read vulnerability. An attacker can exploit the...

CmsEasy 路径遍历漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology Company. A security vulnerability exists in CmsEasy version 7.7.520211012, which stems from cmseasy being affected by an arbitrary file write vulnerability...

SQL Injection Vulnerability in CmsEasy of Siping Jiuzhou Yitong Technology Co. Ltd (CNVD-2021-40740)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-40144)

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in CmsEasy of Siping Jiuzhou Yitong Technology Co.

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. SQL injection vulnerability exists in CmsEasy of Siping City Jiuzhou Yitong Technology Co. An attacker can exploit the vulnerability to obtain sensitive database information...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-35531)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

Command Execution Vulnerability in CmsEasy Backend

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. A command execution vulnerability exists in the CmsEasy backend. An attacker can exploit the vulnerability to gain server privileges...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-35527)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

Command Execution Vulnerability in CmsEasy (CNVD-2021-34045)

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a command execution vulnerability that can be exploited by attackers to gain control of the server...

CmsEasy has an information leakage vulnerability

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Logic flaw vulnerability exists in cmseasy (CNVD-2020-51413)

EasTone enterprise website system alias CmsEasy is the only free WeChat + cell phone end + micro site + cell phone SMS + online sales + multi-language website combination of enterprise marketing management platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modi...

Logic flaw vulnerability exists in cmseasy (CNVD-2020-32605)

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...

CmsEasy has a logic flaw vulnerability

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...

File upload vulnerability exists in CmsEasy (CNVD-2020-23793)

Ltd. CmsEasy Ease2Easy enterprise website system, also known as Ease2Easy enterprise website program, is Ease2Easy to develop China's first set of free enterprise website templates for marketing enterprise website management system, the system front html, fully SEO-compliant, as well as online...

Command Execution Vulnerability in CmsEasy

CmsEasy is a web content management system based on PHP+Mysql architecture and a PHP development platform. A command execution vulnerability exists in CmsEasy, which allows attackers to exploit the vulnerability to execute commands to gain server privileges...

SQL Injection Vulnerability in CmsEasy

CmsEasy is a web content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...