Stored Cross-Site Scripting Vulnerability in Ocean CMS

Ocean Movie Management System seacms, ocean cms is a video-on-demand system designed for webmasters with different needs. Ocean CMS has a stored cross-site scripting vulnerability, attackers can use the vulnerability to implant cross-site code, launch cross-site attacks, and realize the...

CSRF Vulnerability in Ocean CMS V6.48 Add Administrator Backend

Ocean Movie System aka Ocean CMS seacms is a PHP movie system. Ocean CMS V6.48 CSRF vulnerability exists in the background add administrator. Allows attackers to exploit the vulnerability to forge form links and induce administrators to click to add background accounts...

Multiple SQL Injection Vulnerabilities in Ocean CMS V6.48 Backend

Ocean Movie System aka Ocean CMS seacms is a PHP movie system. Ocean CMS V6.48 backend user search, backend user edit admin\adminmembers.php page id parameter, backend admin\adminmembersgroup.php page $id parameter and admin\admindatarelate.php page $vfield SQL injection vulnerability exists. The...

SQL injection vulnerability in the type parameter of admin_news.php page in Ocean CMS system

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminnews.php page of Ocean CMS. The lack of filtering of the "type" parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in the climit parameter of the admin_pay.php page of the Ocean CMS system

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the Ocean CMS adminpay.php page. The lack of filtering of the climit parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in type parameter of Ocean CMS admin_collect_news.php page

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admincollectnews.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'type' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about...

SQL Injection Vulnerability in Ocean CMS v_field Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admindatarelate.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'vfield' parameter allows attackers to exploit the vulnerability to obtain sensitive database informatio...

SQL Injection Vulnerability in Ocean CMS ckey Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the adminpay.php page of the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'ckey' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the...

SQL Injection Vulnerability in Ocean CMS v_name Parameter

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminajax.php page of Ocean CMS 6.46 utf-8 official version. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Ocean CMS zyapi.php Page

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the Ocean CMS zyapi.php page. The lack of filtering of the '$ids' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...

Stored XSS cross-site scripting vulnerability in Ocean CMS version 6.33 (CNVD-2016-10763)

Ocean CMS is an open source website builder. Ocean CMS 6.33 version exists stored XSS cross-site scripting vulnerability. A stored XSS cross-site scripting vulnerability exists in Ocean CMS version 6.33. An attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

Stored XSS Cross-Site Scripting Vulnerability in Ocean CMS Version 6.33

Ocean CMS is an open source website builder. A stored XSS cross-site scripting vulnerability exists in Ocean CMS version 6.33. An attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

Ocean CMS V6. 2 8 command execution 0DAY-vulnerability warning-the black bar safety net

t00ls a friend fuzz out of a 0day, but the analysis does not come out what's the problem, I analyze a bit. I is how to track this 0day? In fact, as long as the chase area parameters of the treated place. After a character is an illegal judgment, call echoSearchPage function area parameters after...

Ocean CMS to the latest version V6. 2 8 command execution 0DAY-vulnerability warning-the black bar safety net

t00ls a friend fuzz out of a 0day, but the analysis does not come out what's the problem, I analyze a bit. I is how to track this 0day? In fact, as long as the chase area parameters of the treated place. After a character is an illegal judgment, call echoSearchPagefunction area parameters after t...

Ocean CMS uid parameter has SQL injection vulnerability

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the uid parameter of the Ocean CMS i.php page. Attackers can use the vulnerability to obtain sensitive information in the website database...

Ocean CMS 0.0.2 Remote File Inclusion Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Ocean CMS 0.0.2 Remote File Inclusion Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : Cru3l.b0y...