CatfishCMS has a command execution vulnerability

CatfishCMS is open source and free PHP CMS web content management system. CatfishCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of a web server...

File write vulnerability in MetInfo version 6.1.3 backend

MetInfo is a content management system CMS developed using PHP and Mysql by Changsha Mito Information Technology Co. A file write vulnerability exists in the backend of MetInfo version 6.1.3, which can be exploited by attackers to gain control of the web server...

Code execution vulnerability in WTCMS backend

WTCMS is a content management system CMS based on Thinkphp. A code execution vulnerability exists in the WTCMS backend, which can be exploited by an attacker to gain control of the web server...

WordPress FCKEditor-For-Wordpress-Plugin Remote Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A remote upload vulnerability exists in WordPress FCKEditor-For-Wordpress-Plugin. Allows an attacker to upload a webshell and...

ESPCMS suffers from a code execution vulnerability (CNVD-2018-26936)

ESPCMS is developed by PHP+MySQL and is able to run major mainstream cloud platforms. ESPCMS has a code execution vulnerability that can be exploited by attackers to gain control of the web server...

Command Execution Vulnerability in Multiple php Files in Thunderwind Movie CMS v3.8.6

Thunderwind Movie CMS is a PHP based THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. Thunderwind Movie CMS v3.8.6 multiple php file command execution vulnerability, an attacker can exploit the...

Command Execution Vulnerability in YFCMF

YFCMF is a backend content management framework using ThinkPHP 5.1. + foreign ACE 1.40 UI template. YFCMF has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

Code Execution Vulnerability in Frontend of zzzcms V1.5.8 Official Version

zzcms is a free and open source building system, mainly facing the majority of webmasters use. zzzcms V1.5.8 official version of the foreground there is a code execution vulnerability, an attacker can use the vulnerability to obtain control of the web server...

Code Execution Vulnerability in FeiFeiCms Frontend

FeiFeiCms is developed with PHP+Mysql technology and can run on windows and Linux system platform. FeiFeiCms code execution vulnerability exists in the front-end, an attacker can exploit the vulnerability to obtain control of the web server...

Command Execution Vulnerability in D-link Central WifiManager

D-LINK Central WifiManager CWM-100 is D-LINK centralized wireless management software. A code execution vulnerability exists in the implementation of D-Link Central WiFiManager, which can be exploited by an attacker to gain control of a web server...

Command Execution Vulnerability in Discuz!

Discuz! is Comsen Comsenz launched a community-based professional website building platform. A command execution vulnerability exists in Discuz! that can be exploited by an attacker to gain control of the web server...

zzzcms V1.5.7 php official version of the background file upload vulnerability

zzcms is a free and open source building system, mainly facing the majority of webmasters to use. zzzcms V1.5.7 php official version of the background file upload vulnerability, an attacker can use the vulnerability to obtain control of the web server...

Command Execution Vulnerability in In***.php File of CloudYou CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A command execution vulnerability exists in the In.php file of the YUNUCMS enterprise website management system. An attacker can exploit...

File Upload Vulnerability in YCCMS v3.3 System

YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS v3.3 system has a file upload vulnerability that can be exploited by attackers to upload arbitrary files and gain control of the web server...

File upload vulnerability in YCCMS v3.3 system (CNVD-2018-24653)

YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS v3.3 system has a file upload vulnerability that can be exploited by attackers to upload arbitrary files and gain control of the web server...

Arbitrary File Write Vulnerability in LaySNS v2.4

LaySNS is a lightweight, ThinkPHP+Layui-based integrated website management system that integrates content management and community interaction. LaySNS v2.4 has an arbitrary file write vulnerability that can be exploited by an attacker to write arbitrary files and gain control of the web server...

File Upload Vulnerability in the Frontend of Online Training System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A file upload vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co., Ltd. that can be exploited by an...

Code Execution Vulnerability in PHP7CMS

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. A code execution vulnerability exists in PHP7CMS. The vulnerability is due to Modulecreate.php lack of filtering of $data'icon', an attacker can take advantage...

BlazeDVD Pro 7.0.2.0 suffers from a buffer overflow vulnerability

BlazeVideo is a company dedicated to the development, production and marketing of multimedia entertainment applications for PCs and mobile devices. A buffer overflow vulnerability exists in BlazeDVD Pro 7.0.2.0, which stems from a failure to perform checksums when processing parsed PLF files, and...

Code Execution Vulnerabilities in the Backend of OurPHP AoP Building System V1.8.3

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OurPHP OURPHP website builder system V1.8.3 code execution vulnerability exists in the background, attackers can use the vulnerability to obtain control of t...