CVE-2020-21481

CVE-2020-21481 concerns an arbitrary file upload vulnerability in RGCMS v1.06. The description states that a crafted .txt file can be changed to PHP to execute code, implying remote code execution via a malformed upload. Connected documents reiterate the same vulnerability description across mult...

CVE-2020-21481

An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file...

CVE-2020-21480

CVE-2020-21480 affects RGCMS v1.06. The vulnerability is an arbitrary file write that allows an attacker to execute arbitrary code through a crafted PHP file. Impact is stated as high (CVE details mention potential code execution, with CVSSv3.1 vector indicating network access, low complexity, un...

CVE-2020-21480

An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file...

RGCMS code-related vulnerabilities

RGCMS is a web CMS. v1.06 of RGCMS contains a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted .txt file, which will later be changed to a PHP file...

PT-2021-10627

Name of the Vulnerable Software and Affected Versions: RGCMS version 1.06 Description: An arbitrary file upload issue allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file. Recommendations: For RGCMS version 1.06, consider restricting file uploads...

CVE-2020-21481: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file...

CVE-2020-21482: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in RGCMS v1.06 allows attackers to obtain the administrator's cookie via a crafted payload in the Name field under the Message Board module...

CVE-2020-21480: Undefined Security Weakness

An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2021-10626

Name of the Vulnerable Software and Affected Versions: RGCMS version 1.06 Description: An arbitrary file write issue allows attackers to execute arbitrary code via a crafted PHP file. Recommendations: For RGCMS version 1.06, update to a version that fixes this issue to prevent arbitrary code...

PT-2021-10628

Name of the Vulnerable Software and Affected Versions: RGCMS version 1.06 Description: A cross-site scripting XSS issue allows attackers to obtain the administrator's cookie via a crafted payload in the Name field under the Message Board module. Recommendations: For RGCMS version 1.06, as a...

RGCMS security vulnerabilities

RGCMS is a web CMS. v1.06 of RGCMS contains a security vulnerability that could be exploited by attackers to execute arbitrary code via a crafted PHP file...

File upload vulnerability exists in RGCMS (CNVD-2021-35776)

RGCMS is an open source building management system. RGCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Rgcms 2.0-build2021040501 has a file upload vulnerability

Rgcms is an open source building management system, written in PHP language, the system features free, extended, extremely safe, free and open source. Rgcms 2.0-build2021040501 file upload vulnerability , an attacker can use the vulnerability to obtain control of the server...

RGCMS suffers from a file upload vulnerability (CNVD-2021-24705)

RGCMS is an open source building management system. RGCMS has a file upload vulnerability that can be exploited by an attacker to gain server control privileges...

RGCMS has a file inclusion vulnerability

RGCMS is an open source building management system. RGCMS has a file inclusion vulnerability that can be exploited by an attacker to gain server privileges...

Arbitrary File Deletion Vulnerability in RGCMS Backend

RGCMS is an open source building management system, written in PHP with a Thinkphp 5.1 framework. RGCMS backend exists arbitrary file deletion vulnerability. An attacker can use the vulnerability to delete sensitive files in the website...

RGCMS suffers from a file upload vulnerability (CNVD-2021-03290)

RGCMS RuiGu content management system is a set of open source building management system , using PHP language , written in the framework of Thinkphp5.1. , the database using MYSQL database . RGCMS file upload vulnerability , an attacker can use this vulnerability to obtain control of the server...

Command Execution Vulnerability in RGCMS

RGCMS RuiGu content management system is a set of open source building management system , using PHP language , written in the framework of Thinkphp5.1. , the database using MYSQL database . RGCMS there is a command execution vulnerability , an attacker can use the vulnerability to obtain server...

XSS Vulnerability in RGCMS RuiGu Information Management System

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS RuiGu Information Management System has an XSS vulnerability that can be exploited by an attacker t...