Command Execution Vulnerability in Knight CMS of Taiyuan Xunyi Technology Co.

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS has a command execution vulnerability that can be exploited by attackers to gain server control privileges...

SQL Injection Vulnerability in TuziCMS Backend

TuziCMS TC for short is an enterprise web content management system based on PHP+MySql. A SQL injection vulnerability exists in the TuziCMS backend. An attacker can exploit the vulnerability to obtain sensitive database information...

Flawed Logic Vulnerability in YunMok Backend

YUNMOK adopts PHP + MYSQL as the programming language, through the module and visualization to achieve a technology-free website management operations, users are free to use, and the module can be freely edited, the template can be switched at will. YunMok backend has a logic flaw vulnerability,...

SQL Injection Vulnerability in SeaCMS ad***_da***.php File

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. SeaCMS adda.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03279)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A code execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control of t...

Logic Flaw Vulnerability in SeaCMS Front-End Login Page

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A logic flaw vulnerability exists in the front-end login page of SeaCMS. An attacker can exploit this vulnerability to gain access to other users...

Arbitrary File Deletion Vulnerability in SeaCMS

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...

SeaCMS suffers from SQL injection vulnerability (CNVD-2021-01916)

SeaCMS uses php mysql architecture and is a video-on-demand system designed for webmasters with different needs. SeaCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

HcCms has a logic flaw

HcCms is a free website building system developed in php language. Developed using the widely popular PHP MYSQL. HcCms has a logic vulnerability that can be exploited by attackers to obtain sensitive information...

Alumni Management System 1.0 Shell Upload

Exploit Title: Alumni Management System 1.0 - Unrestricted File Upload To RCE Exploit Author: Aakash Madaan Date: 2020-12-17 Vendor Homepage: https://www.sourcecodester.com/php/14524/alumni-management-system-using-phpmysql-source-code.html Software Link:...

Onilne Bus Booking System Project 1.0 Cross Site Scripting

Exploit Title: online bus booking system project using PHP MySQL - Stored cross-site scripting Exploit Author: Krishna Yadav Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html Version: 1.0...

CVE-2020-25889

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...

Sql injection

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...

PT-2020-16251

Name of the Vulnerable Software and Affected Versions Online Bus Booking System Project Using PHP/MySQL version 1.0 Description The issue allows remote attackers to bypass authentication and execute arbitrary SQL commands via the login page by placing a SQL injection payload. This can lead to...

CVE-2020-25889: Improper Neutralization of Special Elements used in an SQL Command

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...

Online Bus Ticket Reservation 1.0 - SQL Injection

Exploit Title: Online Bus Ticket Reservation 1.0 - SQL Injection Date: 2020-12-07 Exploit Author: Sakshi Sharma Vendor Homepage: https://www.sourcecodester.com/php/5012/online-bus-ticket-reservation-using-phpmysql.html Software Link:...

Cyber Cafe Management System 1.0 Cross Site Scripting

Exploit Title: Cyber Cafe Management System Project CCMS 1.0 - Persistent Cross-Site Scripting Date: 04-12-2020 Exploit Author: Pruthvi Nekkanti Vendor Homepage: https://phpgurukul.com Product link: https://phpgurukul.com/cyber-cafe-management-system-using-php-mysql/ Version: 1.0 Tested on: Kali...

XSS Vulnerability in YzmCMS

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS has an XSS vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

WebDamn User Registration And Login System With User Panel SQL Injection

Exploit Title: WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass Date: 18-11-2020 Exploit Author: Aakash Madaan Vendor Homepage: https://webdamn.com/ Software Link : https://webdamn.com/user-management-system-with-php-mysql/ Version: N/A Default Tested on: Windows 10...

News Script PHP Pro Cross-Site Request Forgery Vulnerability

News Script PHP Pro is a PHP/MySQL based web script from Simple PHP Scripts for displaying news on your website. A cross-site request forgery vulnerability exists in News Script PHP Pro 2.3. An attacker can exploit this vulnerability to add new users...