CVE-2019-11568: Unrestricted Upload of File with Dangerous Type

An issue was discovered in AikCms v2.0. There is a File upload vulnerability, as demonstrated by an admin/page/system/nav.php request with PHP code in a .php file with the application/octet-stream content type...

PT-2019-12386

Name of the Vulnerable Software and Affected Versions AikCms version 2.0 Description A file upload issue was discovered, allowing potential execution of PHP code. This can be achieved by sending a request to the "admin/page/system/nav.php" endpoint with a .php file and the application/octet-strea...

Cross site request forgery (csrf)

Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code...

CVE-2019-11456

Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code...

CVE-2019-11456: Cross-Site Request Forgery (CSRF)

Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code...

PT-2019-12318

Name of the Vulnerable Software and Affected Versions Gila CMS version 1.10.1 Description The issue allows for Cross-Site Request Forgery CSRF in the fm/save endpoint, potentially leading to the execution of arbitrary PHP code. Recommendations For Gila CMS version 1.10.1, update to a version that...

CVE-2019-11376

SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a ?php substring in the second text box. NOTE: the vendor indicates that there was an assumption that the content is "made editable on its own...

PT-2019-11990

Name of the Vulnerable Software and Affected Versions 74cms version 5.0.1 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the site domain parameter in the /index.php?m=Admin&c=config&a=edit API endpoint. Recommendations For version 5.0.1, as a...

Maccms Arbitrary PHP Code Execution Vulnerability

Maccms is a PHP-based content management system CMS for film and television. A code injection vulnerability exists in Maccms version 10. A remote attacker can exploit this vulnerability to inject and execute arbitrary PHP code...

PT-2019-19880

Name of the Vulnerable Software and Affected Versions Maccms version 10 Description The issue allows remote attackers to execute arbitrary PHP code by entering this code in a template/default pc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file...

CVE-2019-9829: Inclusion of Functionality from Untrusted Control Sphere

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/defaultpc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates...

CVE-2019-9825

FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file extensions, as demonstrated by adding php to the default jpg,gif,png,jpeg setting, and then using the "add article" feature...

CVE-2019-9825: Unrestricted Upload of File with Dangerous Type

FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file extensions, as demonstrated by adding php to the default jpg,gif,png,jpeg setting, and then using the "add article" feature...

CVE-2019-9651

An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the checkbad function's filtering is not strict, resulting in PHP code execution. This occurs because some dangerous PHP functions such as "eval" are blocked but others such as "system" are not, and...

CVE-2019-9651

CVE-2019-9651 pertains to SDCMS v1.7, where the check_bad() filtering in the file \app\admin\controller\themecontroller.php is insufficiently strict. This allows PHP code execution because dangerous functions (e.g., eval) are blocked while others (e.g., system) are not, and because blocking ".php...

CVE-2019-9651

An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the checkbad function's filtering is not strict, resulting in PHP code execution. This occurs because some dangerous PHP functions such as "eval" are blocked but others such as "system" are not, and...

Simple Machines Forum Code Injection Vulnerability

Simple Machines Forum SMF is an open source web forum system by the SMF team in the United States. A security vulnerability exists in SMF version 2.0.4. An attacker can exploit the vulnerability to inject PHP code with the help of the 'dictionary' parameter...

PT-2019-19777

Name of the Vulnerable Software and Affected Versions SDCMS version 1.7 Description An issue in the themecontroller.php file allows for PHP code execution due to insufficient filtering in the check bad function. This is because the filtering does not strictly block all dangerous PHP functions, su...

CVE-2019-9651: Improper Control of Generation of Code

An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the checkbad function's filtering is not strict, resulting in PHP code execution. This occurs because some dangerous PHP functions such as "eval" are blocked but others such as "system" are not, and...

PT-2019-6206

Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.1.27 PHP versions 7.2.x prior to 7.2.16 PHP versions 7.3.x prior to 7.3.3 Description The issue is related to an uninitialized read in the EXIF component of PHP, which can be exploited by a remote attacker to execute...