DuxCMS 安全漏洞

DuxCMS is an open source content management system. A security vulnerability exists in DuxCMS version 2.1, which originates from cross-site scripting due to manipulation of the content parameter in an unknown section of its Article Handler component admin.php&r=article/AdminContent/edit file. The...

CVE-2020-36609

CVE-2020-36609 affects annyshow DuxCMS 2.1. The vulnerability is a cross-site scripting in the Article Handler’s file admin.php&r=article/AdminContent/edit, triggered by manipulating the content parameter. Attacks can be initiated remotely and public exploit information exists. No patch/version f...

CVE-2021-3242

DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=...

CVE-2021-3242

DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=...

Sql injection

DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=...

CVE-2021-3242

DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=...

CVE-2021-3242

CVE-2021-3242 affects DuxCMS v3.1.3. A SQL injection vulnerability exists via the component s/tools/SendTpl/index?keyword=, allowing manipulation of the database through that parameter. The connected Red Hat, OSV, NVD and CVE data confirm the same vector without detailing exploit specifics or ava...

DuxCMS 安全漏洞

DuxCms is an open source content management system . DuxCms v3.1.3 version of the existence of SQL injection vulnerability , an attacker can be exploited to exploit the vulnerability through the component s/tools/SendTpl/index to perform SQL injection...

File upload vulnerability in duxcms

duxcms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. A file upload vulnerability exists in duxcms, which can be exploited by attackers to obtain server administrative privileges...

DUXCMS suffers from a file upload vulnerability (CNVD-2021-19800)

DUXCMS is a general-purpose open source program for small and large companies, enterprises, governments, etc., based on PHP+MYSQL and written in CANPHP framework. DUXCMS has a file upload vulnerability that can be exploited by attackers to gain control of a web server...

File upload vulnerability in duxcms content management system backend (CNVD-2020-68884)

duxcms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. duxcms content management system backend file upload vulnerability, attackers can use the vulnerability to obtain server administrative privileges...

File Upload Vulnerability in duxcms Content Management System Backend

DuxCms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. A file upload vulnerability exists in the backend of duxcms content management system, which can be exploited by attackers to obtain server administrati...

SQL Injection Vulnerability in duxcms

duxcms is a general-purpose open source program for large and small companies, enterprises, governments, etc., based on PHP+MYSQL and written in CANPHP framework. duxcms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Stored Cross-Site Scripting Vulnerability in DuxCms Frontend

DuxCms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. DuxCms frontend has a stored cross-site scripting vulnerability. Attackers can insert malicious js code in the front page to get user cookies and other...

DuxCms Version 2.0 Arbitrary File Directory Deletion Vulnerability

DuxCms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. DuxCms 2.0 version exists arbitrary file directory deletion vulnerability. Allow attackers to exploit the vulnerability to delete arbitrary file...

Code Execution Vulnerability in DuxCms

DuxCms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. DuxCms has a code execution vulnerability. Allow attackers to exploit the vulnerability to execute arbitrary code to obtain server privileges...

SQL Injection Vulnerability in DuxCms 3.0

DuxCms is a small and medium-sized website builder based on PHP+MYSQL and written in CANPHP framework. DuxCms 3.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

DuxCms Content Management System user parameter SQL Injection Vulnerability

DuxCms is a PHP development, based on HMVC rules for small and medium-sized enterprises, companies, news, personal and other related industries, website content management. DuxCms content management system user parameters exist SQL injection vulnerability. Attackers can use the vulnerability to...