EUVD-2018-10549

Malware in sbrugna...

EUVD-2019-7007

Malware in sbrugna...

CVE-2019-16192

uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...

DocCMS suffers from SQL injection vulnerability (CNVD-2021-53994)

DocCMS a on November 11, 2012 was officially released, is located in the enterprise, webmasters, developers, network companies, VI planning and design companies, SEO promotion and marketing companies, website beginners and other users tailored to create a new enterprise website, content managemen...

Doccms suffers from SQL injection vulnerability (CNVD-2021-51854)

Rice husk enterprise building system, also known as rice husk cms, Doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free and open source enterprise website building system, enterprise website generation system. Doccms SQL injection vulnerability ,...

CVE-2019-16192

uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...

CVE-2019-16192

uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...

CVE-2019-16192

CVE-2019-16192 affects DocCms 2016.5.17. The vulnerability is in upload_model() of /admini/controllers/system/managemodel.php, where a ZIP containing a PHP file can lead to remote code execution. Exploitation would allow an attacker to run arbitrary PHP on the server, with attacks described as ne...

PT-2019-14569

Name of the Vulnerable Software and Affected Versions DocCms version 2016.5.17 Description The issue allows remote attackers to execute arbitrary PHP code through module management files. This can be achieved by uploading a .php file in a ZIP archive, exploiting the upload model function in the...

CVE-2019-16192: Unrestricted Upload of File with Dangerous Type

uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...

DocCMS la***.php file has an arbitrary file read vulnerability

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. DocCMS la.php file has an arbitra...

Command Execution Vulnerability in Doccms 2016

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. A code execution vulnerability...

CVE-2018-18835

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...

CVE-2018-18835

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...

Code injection

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...

CVE-2018-18835

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...

CVE-2018-18835

CVE-2018-18835 affects DocCms 2016.5.12, where upload_template() in system/changeskin.php enables remote PHP code execution via a template file. The vulnerability permits an attacker to supply a template that is processed by changeskin.php, allowing arbitrary code execution on the affected system...

PT-2018-14683

Name of the Vulnerable Software and Affected Versions DocCms version 2016.5.12 Description The issue allows remote attackers to execute arbitrary PHP code via a template file. This is possible due to a problem in the upload template function located in the system/changeskin.php file...

CVE-2018-18835: Improper Control of Generation of Code

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...

DocCms 2016 version has a file upload vulnerability at the backend templates

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. DocCms 2016 version of the file...