Contao 跨站脚本漏洞

Contao is an open source content management system CMS developed using PHP. The system supports search engines, rights management and CSS frameworks. A security vulnerability exists in Contao versions 4.13.0 through 4.13.3 and earlier, which allows untrusted users to inject malicious code into...

Jfinal CMS 安全漏洞

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.0.1 has a command injection vulnerability, which originates from...

编号撤回

Contao is an open source content management system CMS developed using PHP. A cross-site scripting vulnerability exists in versions of Contao prior to 4.13.3, which stems from the application's lack of validation of user input. An attacker could exploit this vulnerability to execute malicious...

Jspxcms 代码问题漏洞

Blue Intelligence Technology Jspxcms is China's Blue Intelligence Technology Company's set of scalable enterprise-class open source Web content management system CMS. Jspxcms version 10.2.0 has a security vulnerability , the vulnerability stems from the /cmscp/ext/collect/fetchurl.do?url=found th...

wdja SQL注入漏洞

Wdja is a Php-based content management system from the WDJA team. v2.1 of WDJA is vulnerable to SQL injection, which stems from the impact of a SQL injection vulnerability in the front-end search function. An attacker can exploit the vulnerability for SQL injection...

CScms SQL注入漏洞

CScms is a content management system CMS developed based on CI framework. SQL injection vulnerability exists in CScms version 4.1, the vulnerability originates from logging into the backend, opening the song module, creating a new song, deleting it to the recycle bin, and emptying the recycle bin...

CVE-2021-41942

The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database...

Victor CMS SQL Injection Vulnerability (CNVD-2022-85093)

Victor CMS is an open source content management system by Victor Alagwu, a personal developer in Nigeria. v1.0 of Victor CMS is vulnerable to SQL injection, which originates from the username parameter in /includes/login.php, and can be exploited by attackers to inject queries in /CMSsite/ throug...

Subrion CMS 跨站脚本漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1 and earlier, which stems from a lack of data validation of user-supplied data and output in the "Contact Us" plugin of the "Topic List". data an...

CVE-2022-28114

DSCMS v3.0 was discovered to contain an arbitrary file deletion vulnerability via /controller/Adv.php...

Grav Cross-Site Scripting Vulnerability

Grav is a scalable CMS content management system for personal blogs, small content publishing platforms, and single-page product displays. cross-site scripting vulnerabilities exist in versions prior to Grav 1.7.33, which stem from the application's lack of filtering and escaping of user data. An...

TYPO3 One is Enough Library SQL Injection Vulnerability

TYPO3 is a content management system framework CMS/CMF from the Swiss TYPO3 Association.TYPO3 One is Enough Library 4.1.5 and earlier versions are vulnerable to SQL injection, which stems from inadequate cleaning of user-supplied data. A remote attacker could use this vulnerability to send a...

PT-2022-18822 · Unknown · Navigate Cms

Name of the Vulnerable Software and Affected Versions: Navigate CMS version 2.9.4 Description: A Server-Side Request Forgery SSRF in the feed parser class allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter...

CuppaCMS SQL Injection Vulnerability (CNVD-2022-63581)

CuppaCMS is a content management system CMS.A SQL injection vulnerability exists in CuppaCMS v1.0, which originates from the lack of validation of external input SQL statements in /administrator/alerts/alertLightbox.php. An attacker could use this vulnerability to execute illegal SQL commands to...

Seacms 注入漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is designed primarily to manage video-on-demand resources.A security vulnerability exists in Seacms v11.6, which stems from a remote code execution RCE vulnerability in the /admin/weixin.php component. No...

DhCms 路径遍历漏洞

DhCms Dinghua Cloud CMS is a content management system based on PHP and MySQL. A security vulnerability exists in DhCms version 20170919, which originated from an arbitrary folder deletion vulnerability found via /admin.php?r=admin/AdminBackup/del...

BloofoxCms 代码问题漏洞

BloofoxCms is alexlang24 BloofoxCms individual developers of a Php-based text content management system. BloofoxCms 0.5.2.1 version has a security vulnerability, the vulnerability stems from the existence of arbitrary file upload vulnerability via...

ED01-CMS 代码问题漏洞

ED01-CMS is a CMS project in a Udemy course. A security vulnerability exists in ED01-CMS version 20180505, which stems from an arbitrary file upload vulnerability via /admin/users.php?source=edituser&id=1...

Pimcore SQL Injection Vulnerability (CNVD-2022-70599)

Pimcore is a set of open source Web content management platform for creating and managing Web applications from Pimcore Austria. The platform integrates Web content management, e-commerce frameworks and product information management applications. SQL injection vulnerabilities exist in versions...

ED01-CMS SQL注入漏洞

Ed01-Cms is a Cms project in the Udemy course. version 20180505 of ED01-CMS is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in post.php. An attacker could use this vulnerability to execute illegal SQL commands to steal...