PhpOK SQL Injection Vulnerability

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. PhpOK 5.4.137 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability by injecting attachment data via SQL and then calling the attachment...

Information leakage vulnerability in YzmCMS

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS information leakage vulnerability , attackers can use the vulnerability to obtain sensitive user information...

Unauthorized access vulnerability in songcms front-end

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. An unauthorized access vulnerability exists in the front-end page of SongCMS. An attacke...

Command Execution Vulnerability in songcms Backend

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...

Arbitrary Code Execution Vulnerability in Ocean Cms Backend

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. There is an arbitrary code execution vulnerability in the backend of SeaCMS, which can be exploited by attackers to gain control of the server...

Arbitrary File Deletion Vulnerability in WMCMS (CNVD-2021-13595)

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file deletion vulnerability , an attacker can exploit the vulnerability to delete any file under the server...

Command Execution Vulnerability in Knight CMS of Taiyuan Xunyi Technology Co.

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS has a command execution vulnerability that can be exploited by attackers to gain server control privileges...

SQL Injection Vulnerability in TuziCMS Backend

TuziCMS TC for short is an enterprise web content management system based on PHP+MySql. A SQL injection vulnerability exists in the TuziCMS backend. An attacker can exploit the vulnerability to obtain sensitive database information...

Flawed Logic Vulnerability in YunMok Backend

YUNMOK adopts PHP + MYSQL as the programming language, through the module and visualization to achieve a technology-free website management operations, users are free to use, and the module can be freely edited, the template can be switched at will. YunMok backend has a logic flaw vulnerability,...

SQL Injection Vulnerability in SeaCMS ad***_da***.php File

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. SeaCMS adda.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03279)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A code execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control of t...

Logic Flaw Vulnerability in SeaCMS Front-End Login Page

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A logic flaw vulnerability exists in the front-end login page of SeaCMS. An attacker can exploit this vulnerability to gain access to other users...

Arbitrary File Deletion Vulnerability in SeaCMS

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...

SeaCMS suffers from SQL injection vulnerability (CNVD-2021-01916)

SeaCMS uses php mysql architecture and is a video-on-demand system designed for webmasters with different needs. SeaCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

HcCms has a logic flaw

HcCms is a free website building system developed in php language. Developed using the widely popular PHP MYSQL. HcCms has a logic vulnerability that can be exploited by attackers to obtain sensitive information...

Alumni Management System 1.0 Shell Upload

Exploit Title: Alumni Management System 1.0 - Unrestricted File Upload To RCE Exploit Author: Aakash Madaan Date: 2020-12-17 Vendor Homepage: https://www.sourcecodester.com/php/14524/alumni-management-system-using-phpmysql-source-code.html Software Link:...

Onilne Bus Booking System Project 1.0 Cross Site Scripting

Exploit Title: online bus booking system project using PHP MySQL - Stored cross-site scripting Exploit Author: Krishna Yadav Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html Version: 1.0...

CVE-2020-25889

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...

Sql injection

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...

Online Bus Ticket Reservation 1.0 - SQL Injection

Exploit Title: Online Bus Ticket Reservation 1.0 - SQL Injection Date: 2020-12-07 Exploit Author: Sakshi Sharma Vendor Homepage: https://www.sourcecodester.com/php/5012/online-bus-ticket-reservation-using-phpmysql.html Software Link:...