PT-2022-16774

Name of the Vulnerable Software and Affected Versions sentcms versions 4.0.x Description The issue allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in PHP code execution through the "/user/upload/upload" API endpoint. Recommendations...

PT-2022-16775

Name of the Vulnerable Software and Affected Versions sentcms versions 4.0.x Description The issue allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in PHP code execution in the /admin/upload/upload endpoint. Recommendations For sentc...

FrogCMS SentCMS Remote Code Execution (CVE-2021-26794)

A remote code execution vulnerability exists in FrogCMS SentCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

CVE-2021-26794

CVE-2021-26794 affects FrogCMS SentCMS v0.9.5, allowing remote code execution via a crafted PHP file uploaded through upload.php. Multiple connected sources (RH Red Hat, CVE lists, CP advisories, CNVD/CNNVD equivalents, and CVE records) describe it as a privilege escalation leading to arbitrary c...

CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

CVE-2021-26794: Unrestricted Upload of File with Dangerous Type

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file...

PT-2021-17135

Name of the Vulnerable Software and Affected Versions FrogCMS SentCMS version 0.9.5 Description The issue allows for privilege escalation in the 'upload.php' file, enabling an attacker to execute arbitrary code by uploading a crafted php file. Recommendations For FrogCMS SentCMS version 0.9.5,...

File Upload Vulnerability in SentCMS of Nanchang Tengshu Technology Co.

SentCMS is a website management system created by Nanchang Tengshu Technology Co. Ltd. SentCMS suffers from a file upload vulnerability that can be exploited by attackers to upload scripts and gain control of the web server...

File Upload Vulnerability in SentCMS Web Management System

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. A file upload vulnerability exists in SentCMS, which can be exploited by attackers to upload scripts and gain control of the web server...

Code Execution Vulnerability in SentCMS v3.0.1707

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. A code execution vulnerability exists in SentCMS v3.0.1707, which is caused by the system failing to effectively filter data written to cache files. An attacker can u...

File Upload Vulnerability in SentCMS v3.0.1707

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. A file upload vulnerability exists in SentCMS v3.0.1707, which is due to the system failing to effectively filter uploaded files. An attacker can exploit this...

Arbitrary User Password Reset Vulnerability in sentcms v3.0.170127

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. SentCMS v3.0.170127 has an arbitrary user password reset vulnerability, which occurs because the system fixes the encryption key. An attacker can reset any user's...

File upload vulnerability in frontend of sentcms v3.0.170127

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. SentCMS v3.0.170127 has a file upload vulnerability, due to the system fails to strictly detect the editor function when uploading files. A remote attacker can use th...

Logic Design Vulnerability in SentCMS v3.0.1707

SentCMS is a website management system of Nanchang Tengshu Technology Co. A logical design vulnerability exists in SentCMS v3.0.1707. The vulnerability exists in \application\user\controller\Profile.php, which allows an attacker to modify the administrator's information by modifying the member's...