Aptar CMS has a flawed logic vulnerability

Aptar CMS website management system adopts PHP+MYSQL technology, supports pseudo-static function, can generate google and baidu maps, supports custom url, keywords and description, and facilitates SEO search. Aptar CMS has a logic flaw vulnerability that can be exploited by attackers to compromis...

KuaiFanCMS Arbitrary File Read Vulnerability

KuaiFanCMS later referred to as KF using PHP5 + MYSQL as the technical basis for the development of KF using the Smarty template engine to build a site system. KuaiFanCMS V5 has a security vulnerability, the vulnerability stems from KuaiFanCMS V5 in chakanhtml.module.php file HTML url parameter...

SQL Injection Vulnerability in RPCMS (CNVD-2021-45386)

RPCMS is a lightweight content management/blogging system based on PHP MYSQL. RPCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

defenselessV1 - Just Another Vulnerable Web Application

Defenseless is a vulnerable web application written in PHP/MySQL. This is the first version of this application. The purpose of this application is to create security awareness among developers and new guys in application security. It would soon be updated with with more bugs and a new vulnerable...

YXcms has a directory traversal vulnerability

YXcms is a PHP and MySQL based enterprise building content management system CMS. A directory traversal vulnerability exists in YXcms. An exploiter can use this vulnerability to traverse files on the server to obtain sensitive information...

Simple-Log Cross-Site Request Forgery Vulnerability

Simple-Log is an open source free blog system based on PHP+MySQL. A cross-site request forgery vulnerability exists in Simple-Log v1.6, which is caused by Simple-Log not adequately verifying that requests come from trusted users. The vulnerability can be exploited to gain privileges and execute...

BloofoxCMS Path Traversal Vulnerability

bloofoxCMS is a free open source PHP + MySQL based Web content management system . A directory traversal vulnerability exists in BloofoxCMS version 0.5.2.1. An attacker can exploit this vulnerability by inserting the '... /' payload into the 'fileurl' parameter to achieve directory traversal...

BloofoxCMS Cross-Site Request Forgery Vulnerability

BloofoxCMS is a free open source PHP + MySQL based Web content management system . A cross-site request forgery vulnerability exists in BloofoxCMS version 0.5.2.1. An attacker can exploit this vulnerability by using mode=settings&page=editor to change the content of arbitrary files...

BloofoxCMS Cross-Site Scripting Vulnerability (CNVD-2021-40550)

BloofoxCMS is a free and open source web content management system based on PHP+MySQL. A reflective cross-site scripting vulnerability exists in BloofoxCMS version 0.5.2.1. An attacker can exploit this vulnerability by using the fileurl parameter to conduct cross-site scripting attacks...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2021-40495)

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. YzmCMS 5.8 version of the /admin/systemmanage/userconfigedit.html page there is a cross-site scripting vulnerability, an attacker can use the vulnerability to inject...

SQL Injection Vulnerability in CmsEasy of Siping Jiuzhou Yitong Technology Co. Ltd (CNVD-2021-40740)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Arbitrary file deletion vulnerability in emlog (CNVD-2021-41633)

emlog is short for every memory log, a PHP and MySQL based blog and CMS builder. There is an arbitrary file deletion vulnerability in emlog. An attacker can exploit this vulnerability to delete arbitrary files...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-40144)

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

ESPCMS suffers from a command execution vulnerability (CNVD-2021-39839)

ESPCMS is an enterprise building management system based on PHP+MYSQL. A command execution vulnerability exists in ESPCMS, which can be exploited by attackers to gain control of the server...

MetInfo File Modification Vulnerability

MetInfo adopts PHP+Mysql architecture, it is a cms building system which is very friendly to SEO, fully functional, supports multi-language, responsive display, and extremely suitable for enterprise and company website construction. A file modification vulnerability exists in MetInfo 7.0 beta. An...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2021-34497)

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. A stored cross-site scripting vulnerability exists in the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter in YzmCMS version 5.6. The vulnerabilit...

Command Execution Vulnerability in WMCMS

WMCMS is based on PHP MYSQL as the core development, free open source professional Chinese labeling system. WMCMS command execution vulnerability , an attacker can use the vulnerability to obtain control of the server...

Command execution vulnerability in Hurricane CMS (CNVD-2021-35575)

Hurricane CMS is a content management system developed using PHP mysql. Hurricane CMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34781)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Code Execution Vulnerability in EmpireCMS v7.5 Backend

EmpireCMS is an open source software program that runs on a PHP MySQL database. A code execution vulnerability exists in the EmpireCMS v7.5 backend, which can be exploited by an attacker to upload Trojan horse files and execute system commands...