Electron Technologies FZC PopojiCMS 路径遍历漏洞

Electron Technologies FZC PopojiCMS is an open source content management system CMS from Electron Technologies FZC based on the Popoji framework.A path traversal vulnerability exists in Electron Technologies FZC PopojiCMS. No detailed vulnerability details are available at this time...

Electron Technologies FZC PopojiCMS 跨站请求伪造漏洞

Electron Technologies FZC PopojiCMS is an open source content management system CMS based on the Popoji framework from Electron Technologies FZC. version 2.0.1 of Electron Technologies FZC PopojiCMS admin.php is vulnerable to cross-site request forgery. No detailed vulnerability details are...

PopojiCMS Cross-Site Scripting Vulnerability (CNVD-2021-94933)

PopojiCMS is a content management system, the idea is to make it easy for everyone to manage their website. popojiCMS version 1.2 /admin.php?mod=user...

CVE-2020-21357

A stored cross site scripting XSS vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field...

CVE-2020-21356

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads...

CVE-2020-21357

A stored cross site scripting XSS vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field...

CVE-2020-21356

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads...

Information disclosure

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads...

CVE-2020-21357

A stored cross site scripting XSS vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field...

CVE-2020-21357

PopojiCMS 1.2 is affected by a stored XSS in /admin.php?mod=user&act=addnew, exploitable via a crafted payload in the E-Mail field. The vulnerability stems from an input that is stored and later rendered, enabling arbitrary web scripts or HTML execution. Exploitation details are not provided in t...

CVE-2020-21356

The CVE concerns PopojiCMS 1.2. An information disclosure in upload.php allows disclosure of the host’s physical path when a file upload is performed and the code deletes the form field name = "file". The underlying cause is a misstep in handling or validating uploaded filenames/paths during the ...

CVE-2020-21356

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads...

Electron Technologies FZC PopojiCMS 跨站脚本漏洞

PopojiCMS is a content management system, the idea is to make it easy for everyone to manage their website. popojiCMS version 1.2 /admin.php?mod=user...

Electron Technologies FZC PopojiCMS 信息泄露漏洞

Electron Technologies FZC PopojiCMS is an open source content management system CMS from Electron Technologies FZC based on the Popoji framework. An information disclosure vulnerability exists in PopojiCMS, which originates from the product upload.php page, where deleting name = file when uploadi...

File upload vulnerability in PopojiCMS ad***_co***.php file

PopojiCMS is a content management system. A file upload vulnerability exists in the PopojiCMS adco.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File upload vulnerability in PopojiCMS ad***_th***.php file

PopojiCMS is a content management system. A file upload vulnerability exists in the PopojiCMS adth.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Arbitrary File Deletion Vulnerability in PopojiCMS

POPOJI is built on the Laravel framework and can be used to create your own classic engine. PopojiCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Logic Flaw Vulnerability in PopojiCMS

PopojiCMS is a content management system. A logic flaw vulnerability exists in PopojiCMS, which can be exploited by attackers to cause an impact on usability...

XSS vulnerability in Popojicms frontend co***.php page

PopojiCMS is an open source content management system CMS based on the Popoji framework. Popojicms front co.php page has an XSS vulnerability that can be exploited by attackers to inject arbitrary Web script or HTML...

PopojiCMS Input Validation Error Vulnerability

PopojiCMS is an open source content management system CMS based on the Popoji framework. An input validation error vulnerability exists in PopojiCMS. The vulnerability stems from a web-based system or product that does not properly validate input data, and no detailed vulnerability details are...