WordPress Cross-Site Scripting Vulnerability (CNVD-2021-44303)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Ivory Search WordPress plugin versions prior to...

Command Execution Vulnerability in CmsEasy (CNVD-2021-34045)

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a command execution vulnerability that can be exploited by attackers to gain control of the server...

XSS Vulnerability in Mito Enterprise Website Builder System

Mito enterprise building system using PHP MySQL architecture , is a suitable for enterprise building open source free CMS station building system . Mito enterprise website system XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as administrator cookies...

Songcms is vulnerable to arbitrary file downloads

SongCMS is a free and open source CMS based on PHP+MySQL, ASP+Access/SQL Server development, enterprise-oriented, multi-language support. Songcms has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

SongCMS suffers from SQL injection vulnerability (CNVD-2021-26004)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain...

SQL injection vulnerability in SongCMS PHP version (CNVD-2021-26160)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS PHP version suffers from a SQL injection vulnerability, which can be exploited b...

Command Execution Vulnerability in Hurricane CMS

Hurricane CMS is a content management system developed using PHP mysql. Hurricane CMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Hurricane CMS has an arbitrary file read vulnerability

Hurricane CMS is a content management system developed using PHP mysql. Hurricane CMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Songcms suffers from SQL injection vulnerability (CNVD-2021-25000)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . Songcms SQL injection vulnerability , attackers can use the vulnerability to obtain...

74cms 6.0.20 suffers from a logic flaw vulnerability (CNVD-2021-25005)

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. A logic flaw vulnerability exists in 74cms 6.0.20, which can be exploited by attackers to compromise the integrity of the system...

SQL Injection Vulnerability in Health Collection Reporting System (CNVD-2021-24511)

Health collection and reporting system using PHP + mysql development, open source code, to facilitate secondary development. Health collection and reporting system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Code execution vulnerability in geeweb

geeweb is a PHP MySQL-based development to completely free, fast site, easy maintenance, high security, strong load force, SEO friendly and other features, for the small and medium-sized enterprises, social groups, schools and individual users, such as the station-building system. A code executio...

SQL injection vulnerability exists in the open-source version of the UX365 web site navigation (CNVD-2021-24438)

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...

SQL injection vulnerability in the open source version of UX365 website navigation

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...

Online Ordering System 1.0 Shell Upload

Exploit Title: Online Ordering System 1.0 - Arbitrary File Upload to Remote Code Execution Date: 04/03/2021 Exploit Author: Suraj Bhosale Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/5125/online-ordering-system-using-phpmysql.html Version: 1.0...

SeaCMS suffers from SQL injection vulnerability (CNVD-2021-17447)

SeaCMS is a web content management system based on PHP MYSQL architecture and can run across platforms. SeaCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SeaCMS suffers from an XSS vulnerability (CNVD-2021-17448)

SeaCMS is a web content management system based on PHP MYSQL architecture and can run across platforms. SeaCMS has an XSS vulnerability. An attacker can exploit this vulnerability to obtain sensitive information such as user cookies...

OurPHP Backend Data Backup Function Has Arbitrary File Deletion Vulnerability

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP background data backup function exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete arbitrary files...

Code Execution Vulnerabilities in Knight CMS Backend of Taiyuan Xunyi Technology Co.

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS code execution vulnerabilities exist in the background. Attackers can exploit the vulnerability to obtain control of the server...

Advisto PEEL SHOPPING Cross-Site Scripting Vulnerability

Advisto PEEL SHOPPING is an open source e-commerce system based on PHP and MySQL. A cross-site scripting vulnerability exists in Advisto PEEL SHOPPING, which arises from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...