CVE-2019-9015: Improper Limitation of a Pathname to a Restricted Directory

A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding...

PT-2019-19310

Name of the Vulnerable Software and Affected Versions MOPCMS versions prior to 2018-11-30 Description A Path Traversal issue was discovered, allowing the deletion of critical files. The issue is related to the "column management" function, where the path added to the column is not verified. This...

XYCMS column management module pid parameters have sql injection vulnerability

XYCMS, formerly known as Nanjing XYCMS Enterprise Station Building System, is a station building platform that provides one-stop web solutions for Chinese enterprises. XYCMS PHP version 1.4 version of the column management module there is a sql injection vulnerability, due to the pid parameter...