EyouCms 跨站请求伪造漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms version V1.5.9, which stems from the discovery of multiple cross-site request forgery CSRF vulnerabilities vi...

File Download Vulnerability in EWEB Network Management System of Beijing StarNet Ruijie Network Technology Co.

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A file download vulnerability exists in the EWEB network management system of Beijing StarN...

File upload vulnerability exists in the website building system of Hangzhou Bocai Network Technology Co.

Ltd. is an innovative company that provides comprehensive digital services including strategy consulting, visual design, technology development, content manufacturing and marketing. There is a file upload vulnerability in the website building system of Hangzhou Bocai Network Technology Co...

Arbitrary File Download Vulnerability in Panmicro E-Weaver of Shanghai Panmicro Network Technology Co.

E-Weaver is the Pan-Micro collaboration management platform. Ltd. Panmicro E-Weaver suffers from an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

OFCMS Cross-Site Scripting Vulnerability

OFCMS is a content management system CMS developed by China Zhongtian Network Technology Company using Java language. v1.1.4 of OFCMS has a cross-site scripting vulnerability, which originates from the component /admin/comn/service/update.json lack of data validation filtering for user-supplied...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45399)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability, which originates from the id parameter in /admin.php/singer/admin/lists/zhuan that lacks validation of...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45397)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/plsave for...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45398)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/save for...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45893)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. A SQL injection vulnerability exists in CSCMS Music Portal System, which can be exploited by attackers to execute illegal SQL commands...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45901)

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing validation of the id parameter at /admin.php/pic/admin/pic/del for external...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45396)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/hy against...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45903)

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which stems from the lack of validation of the id parameter of /admin.php/pic/admin/type/del against external...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45403)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability, which originates from the id parameter in /admin.php/User/levelsort that lacks validation of externally...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45400)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/singer/admin/singer/del fo...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45894)

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing validation of the id parameter in /admin.php/Label/jsdel for external input...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45401)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/singer/admin/singer/hy...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45895)

CSCMS Music Portal System is a diversified content management system from China Sunseeker Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which stems from the missing validation of the id parameter in /admin.php/Label/pagedel for external input SQ...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45394)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. A SQL injection vulnerability exists in the CSCMS Music Portal System due to a lack of validation of the id parameter of /admin.php/user/zudel against externally entered SQL...

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/vod/admin/topic/del for...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45897)

CSCMS Music Portal System is a diversified content management system from China Chongsheng Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing id parameter in /admin.php/news/admin/lists/zhuan validation of external...