35 matches found
VulnCheck KEV: CVE-2018-18084
An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter...
EUVD-2018-9821
Malware in sbrugna...
EUVD-2018-9822
Malware in sbrugna...
Duomi (DuomiCms) film and television management system has unauthorized access vulnerabilities
Duomi DuomiCms film and television management system is a set of video on demand system designed for film and television station owners, using PHP + MYSQL architecture, native PHP code to bring excellent access speed and load capacity. Duomi DuomiCms Movie and TV Management System has an...
SQL Injection Vulnerability in DuomiCms Backend
Duomi DuomiCms film and television management system is a set of video on demand system designed for film and television station owners, using PHP + MYSQL architecture, native PHP code to bring excellent access speed and load capacity. DuomiCms backend has SQL injection vulnerability, attackers c...
Duomicms x3.0_UTF8_Official version of the front-end SQL injection vulnerability
DuomiCms is a video-on-demand system designed for movie and TV station owners. Duomicms x3.0UTF8official version of the front end of the vi.php file there is a SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...
Sql injection
An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter...
CVE-2018-18083
An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...
CVE-2018-18083
An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...
CVE-2018-18084
An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter...
CVE-2018-18084
An SQL injection vulnerability exists in DuomiCMS 3.0 within the ajax.php file. The flaw is triggered via the uid parameter, which allows for improper neutralization of special elements used in an SQL command. This vulnerability has been observed in the wild and identified in honeypot environment...
CVE-2018-18083
CVE-2018-18083 affects DuomiCMS 3.0. Affected component: search.php, where the parameter searchword is processed and unsafely uses eval during if processing, enabling remote PHP code execution. This yields high/severe impact (NVD CVSS3: 9.8, CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploit...
CVE-2018-18083
An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...
CVE-2018-18084
An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter...
CVE-2018-18084: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter...
CVE-2018-18083: Improper Control of Generation of Code
An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...
duomicms前台全局变量覆盖导致getshell
...
Duomi (DuomiCms) Movie Management System X3.0 version of the existing code execution vulnerabilities
Duomi DuomiCms Movie and TV management system is a set of video on demand system designed for different needs of webmasters. Duomi DuomiCms Movie and TV Management System X3.0 version of the code execution vulnerability, an attacker can exploit the vulnerability to execute arbitrary code...
SQL injection vulnerability in DuomiCms X3.0 background admin_collect.php page
DuomiCms is a video-on-demand system designed for film and television station owners. There is a SQL injection vulnerability in the admincollect.php page of DuomiCms X3.0 backend. An attacker can exploit the vulnerability to obtain sensitive database information...