X6CMS backend has arbitrary file deletion vulnerability

X6CMS, fully known as Xiaoliu Website Content Management System, is a full-featured marketing website management platform with PHP+MYSQL architecture, built-in SEO optimization mechanism in the whole station, simple interface and convenient operation. X6CMS V2.220130305 version of the background...

Code execution vulnerability in AddonsController.class.php file in backend of Thunderwind Movie CMS v3.3.4

Thunderwind Movie CMS is a PHP based THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. A code execution vulnerability exists in the AddonsController.class.php file in the backend of Thunderwind CMS...

File Upload Bypass Vulnerability in Pivotx CMS Article Posting Page

PivotX CMS is an open source blog content management system Blog CMS. Pivotx CMS 2.3.11 and previous versions of the article publishing page file upload bypass vulnerability , due to fileupload.php file of $disallowedextensions filter array has a design flaw , an attacker can exploit the...

SQL Injection Vulnerability in Ocean CMS tid Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admintopicvod.php page of Ocean CMS 6.46 utf-8 official. The lack of filtering of the 'tid' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...

Exponent CMS File Upload Vulnerability

Exponent CMS employs an intuitive and flexible content editing system that allows website pages to be edited on-page as it is displayed. A file upload vulnerability exists in Exponent CMS due to a failure to properly validate user input. This allows attackers to exploit the vulnerability to uploa...

Web Content System 2.7.1 - Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv=Content-Type content=text/html; charset=windows-1254 titleWeb Content System v2.7.1 Remote File Include Exploit/title script language=JavaScript...

VulnCheck KEV: CVE-2009-3041

SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for 1 ecrire/exec/install.php and 2 ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009...

RPortal 1.1 - 'file_op' Remote File Inclusion

RPortal v1.1 Rportal is a management system of contents simple and powerful Web, enabling you to create your site in a few minutes, while profiting from a complete and effective administration. Remote and Local File Inclusion Vulnerability = 1.1 Found the 29th September 2008 Author: Kad mail :...

Remote file inclusion

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System WCS 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathJavascriptEdit parameter...

CVE-2007-1771

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System WCS 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathJavascriptEdit parameter...

CVE-2007-1771

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System WCS 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathJavascriptEdit parameter...

CVE-2007-1771

CVE-2007-1771 : Concrete details from multiple sources show a PHP remote file inclusion in Ay System Solutions Web Content System (WCS) 2.7.1. The vulnerability occurs in manage/javascript/formjavascript.php, allowing remote attackers to execute arbitrary PHP code via a URL supplied in the path[J...

AY System Solutions Web Content System远程文件包含漏洞

AY System Solutions Web Content System是一款基于PHP的WEB应用程序。 AY System Solutions Web Content System不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'formjavascript.php'脚本对用户提交的'pathJavascriptEdit'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 AY System Solutions Web Content System 2.7.1 目前没有解决方案提供：...

Web Content System 2.7.1 Remote File Inclusion Exploit

No description provided by source. Web Content System //'=============================================================================================== //'Script Name : Web Content System //' //'? //'.... //'.. //'ERROR------------------------------...

Web Content System 2.7.1 - Remote File Inclusion

Web Content System 2.7.1 - Remote File Inclusion Web Content System //'=============================================================================================== //'Script Name : Web Content System //' //'? //'.... //'.. //'ERROR--------------------------------------------------------- //...

Web Content System 2.7.1 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ====================================================== Web Content System 2.7.1 Remote File Inclusion Exploit ====================================================== Web Content System...

Web Content System 2.7.1 - Remote File Inclusion

Web Content System //'=============================================================================================== //'Script Name : Web Content System //' //'? //'.... //'.. //'ERROR--------------------------------------------------------- // kezzap66345.Turkey // ... //Basic exploit,but any...

AY Systems Web Content System远程文件包含漏洞

AY Systems Web Content System是一款基于PHP的WEB内容管理程序。 AY Systems Web Content System不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'main.php'脚本对用户提交的'pathShowProcessHandle'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 AY System Solutions Web Content System 2.6 http://www.aysad.net/...