PT-2018-14740

Name of the Vulnerable Software and Affected Versions JEECMS version 9.3 Description The issue is related to a security problem where an attacker can execute malicious scripts on a user's browser, potentially leading to unauthorized actions. This is achieved through a specific URI, namely...

CVE-2018-18952: Improper Neutralization of Input During Web Page Generation

JEECMS 9.3 has XSS via an index.do/content/update?type=update URI...

File Upload Vulnerability in JEECMS v9.3

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

Stored Cross-Site Scripting Vulnerability in JEECMS Version 9.3

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

Stored Cross-Site Scripting Vulnerability at jeecms Modify Profile

jeecms is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with payment and financial settlement of the content management system. jeecms modified...

Stored Cross-Site Scripting Vulnerability at jeecms Published Articles

JEECMS is a content management system developed by Jiangxi Jinlei Technology Development Co., Ltd. that supports WeChat applet, WeChat public number/service number, column model, cross-customization of content model, as well as with payment and financial settlement. A stored cross-site scripting...

Information leakage vulnerability in jeecms version 9.2

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

Arbitrary file upload vulnerability in jeecms version 9.2

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

jeecms version 9.2 has xml external entity injection vulnerability

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

Deserialization Command Execution Vulnerability in jeecms version 9.2

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

Multiple Vulnerabilities in JeeCMS v8.1 Template Management Function

JEECMS is a JEECMSv8.1 version is a collection of PC Internet, mobile Internet and WeChat website in one of the website group management system. JeeCMS v8.1 template management function exists file write, arbitrary file naming, arbitrary file creation vulnerability. An attacker can exploit the...

JeeCMS v8.1 SQL Injection Vulnerability in Background Data Restore Function

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program , WeChat public number / service number , column model , content model cross-customization , as well as with payment and financial settlement of the content of the e-commerce as one of the conte...

Stored Cross-Site Vulnerability in Jeecms

JEECMS is a web content management system developed by Jiangxi Jinlei Technology Development Co. Jeecms is located in /jeeadmin/jeecms/content/vview.do file there is a stored cross-site vulnerability, due to the response returned data is not strictly filtered. Attackers can use this vulnerability...

Multiple vulnerabilities in jeecms latest version v8.1 front and backend

JEECMS is the domestic Java version of the open source web content management system java cms, jsp cms for short. JEECMS latest version v8 there are XSS and CSRF vulnerabilities , attackers can exploit the vulnerability by sending a private message to the administrator or the submission of...

Stored xss vulnerability in jeecms latest v8.1 frontend

JEECMS is the domestic Java version of the open source web content management system java cms, jsp cms for short. jeecms latest version v8.1 front-end stored cross-site scripting vulnerability , an attacker can use the vulnerability to inject arbitrary Web script or HTML...

Multiple vulnerabilities in jeecms JSPGOU

jspgou is based on java technology development of e-commerce management software. jeecms JSPGOU has stored cross-site scripting, CSRF and arbitrary file reading vulnerabilities. Due to the front-end input filtering is not strict, the background operation does not verify the source , allowing...

Cross-Site Scripting Vulnerability in JEECMS v8

JEECMS v8 is a content management system developed based on java technology. JEECMS v8 suffers from a cross-site scripting vulnerability. An attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

jeecms online shopping mall system has cross-site scripting vulnerability

An online shopping mall system is a system that provides basic services such as information exchange, payment and settlement, and physical distribution necessary for transactions. A cross-site scripting vulnerability exists in jeecms online shopping mall system, the vulnerability exists in the...

JEECMS Arbitrary File Upload Vulnerability

JEECMS is the domestic Java version of the open source web content management system . JEECMS has an arbitrary file upload vulnerability , due to the user to submit the upload file failed to carry out adequate checks . Allow attackers to take advantage of the vulnerability can be uploaded without...

jeecms V2.4.2 ArtiSearch.do 远程命令执行漏洞

0x01 框架概述 江西金磊科技发展有限公司（以下简称金磊科技）成立于2003年，旗下产品JEECMS内容管理系统是国内java开源CMS行业知名度最高、用户量最大的站群管理系统。金磊科技是一家专注java WEB应用软件研发高新技术企业。Jeecms是基于java技术研发的站群管理系统，稳定、安全、高效、跨平台、 无限扩展是jeecms 的优点，系统支持mysql、oracle、sqlserver、db2等主流 数据库。 主页：http://www.jeecms.com 0x02 漏洞细节 谷歌搜索：inurl:jeecms/ArtiSearch.do 涉及大量案例 漏洞证明：...