CVE-2022-27090

Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter...

Simple Real Estate Portal System SQL Injection Vulnerability

Simple Real Estate Portal System is a real estate portal system from Carlo Montero's personal developer.Simple Real Estate Portal System is vulnerable to SQL injection and no detailed vulnerability details are available at this time...

Sql injection

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2022-25399

CVE-2022-25399 affects Simple Real Estate Portal System v1.0, with a SQL injection vulnerability in the id parameter. The issue is documented with high/critical severity (CVSS v3.1: 9.8; network, no auth, UI NONE). No exploitation details or remediation are provided in the connected documents. Se...

BlueCMS suffers from a command execution vulnerability (CNVD-2021-48545)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

BlueCMS suffers from a command execution vulnerability (CNVD-2021-48546)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-45941)

BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting

Exploit Title: Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting Date: 24-11-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://www.sourcecodester.com/php/14600/online-news-portal-using-phpmysqli-source-code.html Software Link:...

SQL Injection Vulnerability in BlueCMS v1.6

bluecms is a free professional local portal system developed by open source combination PHP + MYSQL, focusing on local portal CMS. BlueCMS v1.6 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Logic Flaw Vulnerability in BlueCMS

BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL, focusing on local portal CMS. BlueCMS suffers from a logic flaw vulnerability. Attacks can then exploit the vulnerability to obtain sensitive information...

Stored Cross-Site Scripting Vulnerability in 08CMS Auto Portal System Rental Function

08CMS Automotive Portal System is a high-end solution for automotive portals, based on PHP+MYSQL development, super static page deployment, template and program separation, scalable architecture, open code, unlimited support for deep secondary development. A stored cross-site scripting...

File Inclusion Vulnerability in BlueCMS

BlueCMS is a professional local portal system developed by open source combination of PHP + MYSQL, focusing on local portal CMS. BlueCMS has a file inclusion vulnerability that can be exploited by attackers to gain server privileges...

Stored Cross-site Scripting Vulnerability in Auto Portal System of Dongguan Dingdot Network Technology Co.

Dongguan Dingdot Network Technology Co., Ltd. is a content management and e-commerce management system developer. A stored cross-site scripting vulnerability exists in the automotive portal system of Dongguan Dingdot Network Technology Co. An attacker can exploit the vulnerability to obtain...

Logic Flaw Vulnerability in Cicada Knowledge Enterprise Portal System

The underlying framework of Cicada Knowledge Enterprise Portal System is self-developed with built-in extension mechanism for easy customization and development. Cicada Knowledge Enterprise Portal System has a logic flaw vulnerability, which can be exploited by an attacker to authenticate differe...

SQL Injection Vulnerability in Digital Library Portal System of Beijing Zhixin Digital Map Technology Co.

Beijing Zhixin Digital Library Portal System is widely used in various university library systems. There is a SQL injection vulnerability in the digital library portal system of Beijing Zhixin Digital Map Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information fro...

Arbitrary File Deletion Vulnerability in BlueCMS

BlueCMS is a professional local portal system developed by open source combination of PHP + MYSQL, focusing on local portal CMS. BlueCMS arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete arbitrary files...

Arbitrary Code Execution Vulnerability in BlueCMS

BlueCMS is a professional local portal system developed by open source combination of PHP + MYSQL, focusing on local portal CMS. BlueCMS has an arbitrary code execution vulnerability. Attackers can use this vulnerability to obtain server privileges...

Arbitrary File Download Vulnerability in Mobile Office Portal KK System

BlueLine is a large-platform OA service provider and knowledge management solution provider, a national high-tech enterprise engaged in knowledge-based consulting, software development, implementation and technical services for organizations. An arbitrary file download vulnerability exists in the...

S-CMS news portal system background ajax.php C_1yuan parameter SQL injection vulnerability

S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. S-CMS news portal system background aj.php C1 parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database...

Unauthorized Access Vulnerability in the Digital Portal System of Tesco Information Technology (Shenzhen) Co.

Ltd. is a high-tech enterprise focusing on the field of education informatization, integrating software product research and development, digital resource development, and education information technology service. An unauthorized access vulnerability exists in the digital portal system of Gainful...