Command Execution Vulnerability in DedeCMS

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in DedeCMS. An attacker can exploit this vulnerability to execute arbitrary commands and obtain server control privileges...

File Upload Vulnerability in PageAdmin CMS

PageAdmin CMS is a self-service website builder based on asp.net mvc development. PageAdmin CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

File Write Vulnerability in Ziggy's Fortress

Zhejiang Qiji Technology Co., Ltd. is a company mainly engaged in computer hardware and software, network products, technology development and other projects. A file write vulnerability exists in Qiji Fortress, which can be exploited by an attacker to gain control of a web server...

File Upload Vulnerability in Qibo CMS System

Qibo CMS system is a content management system under Guangzhou Qibo Network Technology Co. There is a file upload vulnerability in the Qibo CMS system that can be exploited by attackers to gain control of the web server...

Code Execution Vulnerability in CICMS v2.9

CICMS system is a php+mysql developed, CodeIgniter based enterprise building system. A code execution vulnerability exists in CICMS v2.9, which can be exploited by attackers to gain control of a web server...

Watch Out! Microsoft Spotted Spike in Astaroth Fileless Malware Attacks

Security researchers at Microsoft have released details of a new widespread campaign distributing an infamous piece of fileless malware that was primarily being found targeting European and Brazilian users earlier this year. Dubbed Astaroth, the malware trojan has been making the rounds since at...

File Upload Vulnerability in Panavision e-message Backend

Panavision e-message is an instant messaging software for business users. A file upload vulnerability exists in the backend of Panmicro e-message. An attacker can exploit this vulnerability to gain control of the web server...

File Write Vulnerability in Deep Throat CMS v4.2

DeepThroat CMS is a set of web tool software, mainly used for small and medium-sized web site construction and management. A file write vulnerability exists in Deep Throat CMS v4.2, which can be exploited by attackers to gain control of a web server...

Catfish Blog v2.1.9 suffers from a file upload vulnerability

Catfish Blog is a specialized system for building blogs. A file upload vulnerability exists in Catfish Blog v2.1.9, which can be exploited by an attacker to gain control of the web server...

Arbitrary Code Execution Vulnerability in phpyun

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. phpyun has an arbitrary code execution vulnerability that can be exploited by attackers to gain control of the web server...

Arbitrary Code Execution Vulnerability in zzzphp v1.6.6 Backend (CNVD-2019-17281)

zzphp is a free website building system developed using PHP. A code execution vulnerability exists in the backend of zzzphp V1.6.6, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in HYBBS Plugin Page

HYBBS is a lightweight community forum program. A file upload vulnerability exists in the HYBBS plugin page, which can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in Campus Flat Fee System

Tianjin Shenzhou Haotian Technology Co., Ltd. is a high-tech enterprise integrating management software design, development, sales and service. A file upload vulnerability exists in the Campus Unified Charging System, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Geek-Framework

Geek-Framework is built on the basis of SpringBoot, a Java foundation development framework . Geek-Framework has a file upload vulnerability that can be exploited by an attacker to gain control of a web server...

File Upload, Unauthorized Access Vulnerabilities in Beijing Jinfang Times Technology Co.

Beijing Jinfang Times Technology Co., Ltd. is a company that provides website construction services for enterprises, institutions and government agencies. There are file upload and unauthorized access vulnerabilities in the website building system of Beijing Jinfang Times Technology Co. Ltd, whic...

DoorGets Arbitrary File Upload Vulnerability

DoorGets is a free and open source content management system. An arbitrary file upload vulnerability exists in /fileman/php/upload.php in doorGets 7.0. A remote, ordinary registered user can exploit this vulnerability to upload a backdoor file to take control of the server...

File Upload Vulnerability in niushop Multi-Merchant Basic v1.11

NiuShop B2B2C Multi-Merchant Mall System is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2B2C Multi-merchant Mall System Up.php file file upload vulnerability. An attacker can upload arbitrary files and...

CVE-2019-11615

/fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server...

CVE-2019-11615

/fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server...

File upload vulnerability in Acme cms po***.php

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Aike CMS po.php file upload vulnerability, attackers can use the vulnerability to upload any file, to obtain control of the server...