lmxcms code injection vulnerability

lmxcms dream cms is a website builder system from China Dream Cms lmxcms company. Code injection vulnerability exists in lmxcms 1.4 and previous versions, the vulnerability stems from the parameter data in the file /admin.php?m=Acquisi&a=testcj&lid=1 which can lead to code injection...

CVE-2024-8523: Improper Control of Generation of Code

A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the function formatData of the file /admin.php?m=Acquisi&a=testcj&lid=1 of the component SQL Command Execution Module. The manipulation of the argument data leads to code injection. The attack may ...

LMXCMS SQL Injection Vulnerability (CNVD-2023-98192)

lmxcms dream cms is a website building system of China dream cms lmxcms company. A SQL injection vulnerability exists in LMXCMS v1.4, which stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute arbitrary code vi...

CVE-2021-35437

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

CVE-2021-35437

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

Sql injection

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

LMXCMS SQL Injection Vulnerability

lmxcms dream cms is a website building system of China dream cms lmxcms company. A SQL injection vulnerability exists in LMXCMS v1.4, which stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute arbitrary code vi...

CVE-2021-35437

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

CVE-2021-35437

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

PT-2023-12263

Name of the Vulnerable Software and Affected Versions LMXCMS version 1.4 Description A SQL injection issue allows an attacker to execute arbitrary code via the TagsAction.class. Recommendations For LMXCMS version 1.4, update to a version that includes a fix for this issue, if available. At the...

CVE-2021-35437

CVE-2021-35437 affects LMXCMS v1.4 . The vulnerability is described as a SQL injection that allows an attacker to execute arbitrary code via the TagsAction.class . Multiple connected sources corroborate that the issue stems from insufficient validation of externally supplied SQL statements. The d...

CVE-2021-35437: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

Design/Logic Flaw

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

lmxcms Security Vulnerabilities

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. A security vulnerability exists in lmxcms version v.1.41, which originated from a vulnerability that allows remote attackers to execute arbitrary code via a carefully crafted script...

CVE-2023-46958

CVE-2023-46958 affects lmxcms v1.41 and enables remote code execution via a crafted script to the admin.php file. The impact is arbitrary code execution with high severity (CVSSv3.1: 9.8). Concrete remediation details are not provided in the documents; one PT Security entry recommends temporarily...

CVE-2023-46958: Improper Control of Generation of Code

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...