PHPCMS 2008 - Remote Code Execution via Template Injection

PHPCMS 2008 suffers from an unauthenticated RCE via template injection in type.php, where attacker-supplied content is written into a PHP template cache file, which is then executable. id: CVE-2018-19127 info: name: PHPCMS 2008 - Remote Code Execution via Template Injection author: tomaquet18...

phpcms-2008-CVE-2018-19127

phpcms-2008-CVE-2018-19127 Недавно мы обнаружили уязвимость в /type.php исходного кода phpcms 2008. Когда злоумышленники отправляют специально сформированные запросы вида "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss", вредоносное содержимое в данном случае "@unlinkFILE;assert$POST1;"...

EUVD-2006-3016

Malware in sbrugna...

EUVD-2011-0663

Malware in sbrugna...

EUVD-2020-14964

Malware in sbrugna...

EUVD-2008-0523

Malware in sbrugna...

EUVD-2011-0662

Malware in sbrugna...

EUVD-2013-5773

Malware in sbrugna...

EUVD-2020-14968

Malware in sbrugna...

EUVD-2005-1842

Malware in sbrugna...

EUVD-2021-23028

Malware in sbrugna...

EUVD-2004-1200

Malware in sbrugna...

EUVD-2019-2091

Malware in sbrugna...

EUVD-2018-6317

Malware in sbrugna...

EUVD-2020-14965

Malware in sbrugna...

EUVD-2004-1199

Malware in sbrugna...

EUVD-2018-6822

Malware in sbrugna...

EUVD-2020-14966

Malware in sbrugna...

EUVD-2021-28065

Malicious code in bioql PyPI...

CVE-2021-40910

There is a reflective cross-site scripting XSS vulnerability in the PHPCMS V9.6.3 management side...