107 matches found
CVE-2023-1321
lmxcms 1.41 contains a SQL injection in AcquisiAction.class.php: the update function’s id parameter can be manipulated (example: -1 with updatexml(0,concat(0x7e,user()),1)#) to trigger remote exploitation. This vulnerability has been publicly disclosed. Some sources mention a workaround for lmxcm...
CVE-2023-1321 lmxcms AcquisiAction.class.php update sql injection
A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file AcquisiAction.class.php. The manipulation of the argument id with the input -1 and updatexml0,concat0x7e,user,1 leads to sql injection. The attack can be...
lmxcms SQL注入漏洞
lmxcms dream cms is a website builder system of China Dream Cms lmxcms company. SQL injection vulnerability exists in lmxcms version 1.41, the vulnerability stems from a security issue in the function reply in the file BookAction.class.php, which leads to SQL injection via the parameter id...
PT-2023-16894 · Lmxcms · Lmxcms
Name of the Vulnerable Software and Affected Versions: lmxcms version 1.41 Description: A critical issue was found in the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1 and updatexml0,concat0x7e,user,1 leads to sql injection. The attack may b...
PT-2023-16893 · Lmxcms · Lmxcms
Name of the Vulnerable Software and Affected Versions: lmxcms version 1.41 Description: A critical issue has been found in the function update of the file AcquisiAction.class.php. The manipulation of the argument id with specific input leads to SQL injection. The attack can be launched remotely...
lmxcms SQL注入漏洞
lmxcms dream cms is a website builder from China Dream Cms lmxcms company. SQL injection vulnerability exists in lmxcms version 1.41, the vulnerability stems from a security issue in the function update in the file AcquisiAction.class.php, which can lead to SQL injection via the parameter id...
CVE-2022-48094
lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php...
CVE-2023-23136
lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...
CVE-2023-23136
lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...
Arbitrary file deletion
lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php...
Arbitrary file deletion
lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...
lmxcms 路径遍历漏洞
lmxcms dream cms is a website builder from China Dream Cms lmxcms company. There is a security vulnerability in lmxcms v1.41, which originated from the discovery of an arbitrary file deletion vulnerability via BackdbAction.class.php...
lmxcms 安全漏洞
lmxcms dream cms is a 222 by China Dream Cms lmxcms company A security vulnerability exists in lmxcms v1.41, which stems from its TemplateAction.class.php component that allows an attacker to achieve arbitrary file reads...
CVE-2023-23136
The provided connected documents confirm a concrete vulnerability in lmxcms v1.41: an arbitrary file deletion issue exploitable via BackdbAction.class.php. The attack surface is the BackdbAction component, with impact described as high on integrity and availability while confidentiality remains u...
CVE-2022-48094
lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php...
CVE-2023-23136
lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...
CVE-2022-48094
lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php...
PT-2023-15571 · Lmxcms · Lmxcms
Name of the Vulnerable Software and Affected Versions: lmxcms version 1.41 Description: The issue is related to an arbitrary file read vulnerability. It affects the TemplateAction.class.php file, allowing unauthorized access to files. Recommendations: For lmxcms version 1.41, consider restricting...
CVE-2022-48094
CVE-2022-48094 affects lmxcms v1.41, with an arbitrary file read vulnerability exposed through TemplateAction.class.php. The issue, confirmed in multiple sources, yields a High confidentiality impact (C:H) and a Medium overall risk (CVSS 3.1: 4.9) with network access, low attack complexity, no us...