SQL Injection Vulnerability in Hsycms Frontend

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Hsycms suffers from a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend sh***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL Injection Vulnerability in FangfaCms

Method Digital Web Content Management System FangfaCms is an enterprise-level PHPCMS website management system. A SQL injection vulnerability exists in the frontend Fl.cls.php of FangfaCms. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in CMS Frontend

Situ CMS is the short name of Situ Tourism Website Management System, which is a self-developed website management system applicable to the construction of tourism websites. A SQL injection vulnerability exists in the frontend of SITO CMS. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in TuziCMS Frontend

TuziCMS TC for short is an enterprise web content management system based on PHP+MySql. There is a SQL injection vulnerability in the MS frontend. An attacker can exploit the vulnerability to obtain sensitive database information...

XSS Vulnerability in CUPCMS v5.0 Frontend

CUPCMS v5.0 cup content management system integrates video, stars, news, comics, community and more. An XSS vulnerability exists in the frontend of CUPCMS v5.0, which can be exploited by attackers to obtain sensitive information from user cookies...

Command Execution Vulnerability in Frontend of Shining Enterprise Website Builder System

Zibo Shining Network Technology Co., Ltd. in November 2014, the company's business scope includes: computer software, hardware development and sales, Internet technology development, technical services and so on. Shining enterprise website building system foreground there is a command execution...

SQL Injection Vulnerability in ZZCMS Frontend (CNVD-2020-59408)

ZZCMS is a content management system. A SQL injection vulnerability exists in the frontend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

Logic Flaw Vulnerability in PCFCMS Frontend

PCFCMS is based on TP6.0 + framework for the core development of simple + general content management system. There is a logic flaw vulnerability in the frontend of PCFCMS, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in e-cology 8.0 Frontend of Shanghai Panmicro Network Technology Co.

e-cology is a collaboration platform. A SQL injection vulnerability exists in the frontend of e-cology 8.0 of Shanghai Panmicro Networks Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS 2020 Frontend SQL Injection Vulnerability

ZZCMS is a content management system for Webmaster Merchants. A SQL injection vulnerability exists in the ZZCMS 2020 frontend, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Dascommerce Mall System v2.0 Frontend

Big business mall system is a business creation network based on ten years of reconstruction of the e-commerce architecture, to create a set of operators, suppliers, purchasers, user distribution, etc., in the PC and mobile devices can be compatible with the operation of a complete set of offline...

SQL Injection Vulnerability in kkcms Frontend

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms front-end SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information i...

SQL Injection Vulnerability in the Frontend of waychar Enrollment System

Waychar Enrollment System is a PHP/MYSQL based enrollment system. A SQL injection vulnerability exists in the frontend of waychar enrollment system. An attacker can exploit this vulnerability to obtain sensitive information from the database...

Stored Cross-Site Scripting Vulnerability in Dum Dum CMS Frontend

Clumsy CMS is developed using PHP5+MYSQL as the technical base, the system is scalable and fully open source. A stored cross-site scripting vulnerability exists in the frontend of Dum Dum CMS. Attackers can use the vulnerability to obtain the administrator cookie...

Multiple Storage-based Cross-site Scripting Vulnerabilities in DM Building System Frontend

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM building system front-end exists in a number of storage-based cross-site scripting vulnerabilities. Attackers can exploit the vulnerability to obta...

XSS Vulnerability in the Frontend of Tuan ah VIP Movie System

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A XSS vulnerability exists in the frontend of Tuan Ah VIP Movie System. An attacker can exploit this vulnerability to obtain user cookie information...

XSS Vulnerability in Extreme CMS Frontend

Extreme CMS is a website building system. An XSS vulnerability exists in the frontend of Extreme CMS, which can be exploited by attackers to obtain user cookie information...

SQL Injection Vulnerability in Stone Technology Online Exam System Frontend

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores...

Command Execution Vulnerability in the Frontend of Netizen's Chinese and English Website Management System

Netizen Chinese and English enterprise website management system is developed using PHP + MYSQL technology and MVC mode, code is easy to maintain, support for pseudo-static function, can generate google and baidu maps, support for customizing url, keywords and descriptions, in line with SEO...