Ltd. CmsEasy station building system file contains vulnerabilities

Through the enterprise website system Alias CmsEasy is the domestic free WeChat + cell phone end + micro site + cell phone text message + online sales + multi-language website combination of enterprise marketing management platform. Siping City, Jiuzhou Yi Tong Technology Co., Ltd CmsEasy...

Command Execution Vulnerability in CmsEasy

Ltd. CmsEasy Ease2Easy enterprise website system, also known as Ease2Easy enterprise website program, is Ease2Easy to develop China's first set of free enterprise website templates for marketing enterprise website management system, the system front html, fully SEO-compliant, as well as online...

Arbitrary File Read Vulnerability in CmsEasy

Ltd. CmsEasy easy to pass enterprise website system, also known as easy to pass enterprise website program, is easy to pass the company to develop China's first set of free enterprise website templates for marketing enterprise website management system, the system foreground to generate html, ful...

File Upload Vulnerability in CmsEasy

Ltd. CmsEasy easy to pass enterprise website system, also known as easy to pass enterprise website program, is easy to pass the company to develop China's first set of free enterprise website templates for marketing enterprise website management system, the system foreground to generate html, ful...

CmsEasy has an override access vulnerability

Ltd. CmsEasy Ease2Easy enterprise website system, also known as Ease2Easy enterprise website program, is Ease2Easy to develop China's first set of free enterprise website templates for marketing enterprise website management system, the system front html, fully SEO-compliant, as well as online...

CVE-2019-8434

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CVE-2019-8434

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CVE-2019-8432

In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter...

Code injection

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CVE-2019-8432

In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter...

CVE-2019-8432

CmsEasy 7.0 is affected by a cross-site scripting (XSS) vulnerability in the ckplayer.php URL parameter. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) as an XSS in CmsEasy 7.0 via ckplayer.php, but no further technical specifics (such as exact code path, exploit detail...

CVE-2019-8434

In CmsEasy 7.0, CVE-2019-8434 describes a cross-site scripting (XSS) vulnerability triggered by the ckplayer.php autoplay parameter. The vulnerability targets the web application component handling that parameter and can lead to script execution in a victim’s browser. Metrics indicate a network-a...

CVE-2019-8432

In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter...

CVE-2019-8434

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CmsEasy website builder system has xss vulnerability

CMSeasy is a web content management system based on PHP+Mysql architecture and a PHP development platform. The use of modular development, easy to use features easy to expand, can be oriented to large and medium-sized sites to provide heavyweight website construction solutions. There is an xss...

Arbitrary File Deletion Vulnerability in cmseasy v6.3_20180808

cmseasy is a web content management system based on PHP+Mysql architecture. An arbitrary file deletion vulnerability exists in cmseasy v6.320180808, which stems from a failure to filter the parameter tplname. An attacker can exploit this vulnerability to delete arbitrary files, resulting in a...

Code Execution Vulnerabilities in CmsEasy (Ease2Enterprise Website System)

CmsEasy enterprise website system CmsEasy is a cms system suitable for enterprise building station provided by Siping Jiuzhou Yitong Technology Co. CmsEasy easy to enterprise website system there are code execution vulnerabilities, attackers can exploit the vulnerability to obtain site...

CmsEasy Cross-Site Request Forgery Vulnerability

CmsEasy is a CMS Content Management System for creating responsive websites from China's Kyushu E-Tech. rich text editor is one of the rich text editors. A cross-site request forgery vulnerability exists in the rich text editor in CmsEasy version 6.120180508. The vulnerability can be exploited by...

CmsEasy Cross-Site Request Forgery Vulnerability (CNVD-2018-14725)

CmsEasy is a CMS Content Management System for creating responsive websites from China's Kyushu E-Tech. rich text editor is one of the rich text editors. A cross-site request forgery vulnerability exists in the rich text editor in CmsEasy version 6.120180508. A remote attacker can exploit this...

Cross site request forgery (csrf)

An issue was discovered in CmsEasy 6.120180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admindir=admin...