File upload vulnerability exists in OurPHP (CNVD-2020-24709)

OurPHP is an enterprise e-commerce website builder. A file upload vulnerability exists in OurPHP, which can be exploited by attackers to gain control of a web server...

File upload vulnerability in freeCMS v1.5 (CNVD-2020-24733)

FreeCMS is an open source free CMS. FreeCMS v1.5 has a file upload vulnerability that can be exploited by an attacker to upload arbitrary files and gain control of the web server...

QCMS suffers from a file upload vulnerability (CNVD-2020-27240)

QCMS website management system is a PHP lightweight system developed through MVC architecture. QCMS has a file upload vulnerability that can be exploited by an attacker to upload files arbitrarily and gain control of the server...

Command Execution Vulnerability in Panavision OA e-Office

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24727)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24724)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24723)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24722)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office systems, mobile OA applications and other collaborative OA solutions fo...

Command Execution Vulnerability in ZZZCMS

zzcms is a free website builder developed in asp language. ZZZCMS has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Guojiz Integrated Content Management System V1.2

Guojiz integrated content management system is a domestic open source light navigation system program, based on ThinkPHP5 development, support for plug-in extensions, support for template extensions. Guojiz integrated content management system V1.2 file upload vulnerability , attackers can use th...

File Upload Vulnerability in YCCMS

YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a file upload vulnerability, which can be exploited by attackers to gain control of a web server...

D Shield of Shenzhen DiYuan Technology Co., Ltd. suffers from webshell bypass vulnerability (CNVD-2020-23537)

D ShieldFirewall is an active defense protection software designed for IIS. D-Shield has a webshell bypass vulnerability, which can be exploited by attackers to bypass detection and gain access to the control privileges of the target server...

Command Execution Vulnerability in Ocean CMS Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. An arbitrary command execution vulnerability exists in the backend of Ocean CMS. An attacker can exploit this vulnerability to gain control of the web server...

File upload vulnerability in S-CMS enterprise website building system (CNVD-2020-20176)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A file upload vulnerability exists in S-CMS, which can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in eFrameWork

eFrameWork is a development framework for B/S application and web development. A file upload vulnerability exists in eFrameWork, which can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in ClanSphere

ClanSphere is a web content management system primarily used for building tribal and eSports websites. ClanSphere suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in S-CMS Enterprise Website Building System (CNVD-2020-21364)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A file upload vulnerability exists in S-CMS, which can be exploited by an attacker to gain control of the web server...

SQL Injection Vulnerability in seacms Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A SQL injection vulnerability exists in the seacms backend. An attacker can exploit this vulnerability to gain control of the web server...

File upload vulnerability in phpcms

PHPCMS uses PHP5+MYSQL as the technical basis for development.V9 uses OOP object-oriented approach to build the basic operational framework. A file upload vulnerability exists in phpcms, which can be exploited by attackers to gain control of the web server...

Remote File Inclusion (RFI) – Detecting the Undetectable

Intro Remote File Inclusion RFI is an attack exploiting the functionality in web applications which allows the inclusion of external source code without validating its content or origin. An RFI payload is a link that points to a malicious file that an application will include in its code example:...