CVE-2022-33085

ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...

EUVD-2020-12914

Malware in sbrugna...

EUVD-2020-10824

Malware in sbrugna...

EUVD-2022-36141

Malicious code in bioql PyPI...

CVE-2023-23007

An issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL injection vulnerability in the function node where members are added...

CVE-2020-18913

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

CVE-2020-20125

EARCLINK ESPCMS-P8 contains a cross-site scripting XSS vulnerability in espcmsweb\espcmsload.php...

CVE-2019-5488

EARCLINK ESPCMS-P8 has SQL injection in the installpack/index.php?ac=Member=verifyAccount verifykey parameter. installpack/espcmspublic/espcmsdb.php may allow retrieving sensitive information from the ESPCMS database...

CVE-2022-33085

ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...

CVE-2022-33085

ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...

Remote code execution

ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...

CVE-2022-33085

ESPCMS P8 is affected by an authenticated remote code execution (RCE) vulnerability in the fetch_filename function under espcms_public/espcms_templates/ESPCMS_Templates. The Red Hat advisory and related records corroborate the issue, describing an authenticated RCE path via that function. No prod...

PT-2022-21681

Name of the Vulnerable Software and Affected Versions ESPCMS P8 Description The issue is an authenticated remote code execution vulnerability. It occurs via the fetch filename function located at espcms publicespcms templatesESPCMS Templates. Recommendations For ESPCMS P8, consider disabling the...

CVE-2022-33085: Undefined Security Weakness

ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...

CVE-2020-20125

EARCLINK ESPCMS-P8 contains a cross-site scripting XSS vulnerability in espcmsweb\espcmsload.php...

CVE-2020-20125

EARCLINK ESPCMS-P8 contains a cross-site scripting XSS vulnerability in espcmsweb\espcmsload.php...

CVE-2020-20125

The provided evidence centers on CVE-2020-20125 affecting EARCLINK ESPCMS-P8. A cross-site scripting (XSS) vulnerability is reported in espcms_web\espcms_load.php. Documents do not specify the exact root cause, affected versions, exploitation details, or mitigations. The connected sources confirm...

PT-2021-10434

Name of the Vulnerable Software and Affected Versions: EARCLINK ESPCMS-P8 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the espcms webespcms load.php file. Recommendations: For EARCLINK ESPCMS-P8, consider disabling access to the...

CVE-2020-20125: Improper Neutralization of Input During Web Page Generation

EARCLINK ESPCMS-P8 contains a cross-site scripting XSS vulnerability in espcmsweb\espcmsload.php...

EARCLINK ESPCMS 跨站脚本漏洞

Honghu Erchuang Netlink Information Technology EARCLINK ESPCMS is an enterprise website builder from Honghu Erchuang Netlink Information Technology Company in China. A cross-site scripting vulnerability exists in EARCLINK ESPCMS-P8, which stems from a cross-site scripting XSS vulnerability...