Command Execution Vulnerability in Discuz!

Discuz! is Comsen Comsenz launched a community-based professional website building platform. A command execution vulnerability exists in Discuz! that can be exploited by an attacker to gain control of the web server...

zzzcms V1.5.7 php official version of the background file upload vulnerability

zzcms is a free and open source building system, mainly facing the majority of webmasters to use. zzzcms V1.5.7 php official version of the background file upload vulnerability, an attacker can use the vulnerability to obtain control of the web server...

Command Execution Vulnerability in In***.php File of CloudYou CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A command execution vulnerability exists in the In.php file of the YUNUCMS enterprise website management system. An attacker can exploit...

File Upload Vulnerability in YCCMS v3.3 System

YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS v3.3 system has a file upload vulnerability that can be exploited by attackers to upload arbitrary files and gain control of the web server...

File upload vulnerability in YCCMS v3.3 system (CNVD-2018-24653)

YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS v3.3 system has a file upload vulnerability that can be exploited by attackers to upload arbitrary files and gain control of the web server...

Arbitrary File Write Vulnerability in LaySNS v2.4

LaySNS is a lightweight, ThinkPHP+Layui-based integrated website management system that integrates content management and community interaction. LaySNS v2.4 has an arbitrary file write vulnerability that can be exploited by an attacker to write arbitrary files and gain control of the web server...

File Upload Vulnerability in the Frontend of Online Training System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A file upload vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co., Ltd. that can be exploited by an...

Code Execution Vulnerability in PHP7CMS

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. A code execution vulnerability exists in PHP7CMS. The vulnerability is due to Modulecreate.php lack of filtering of $data'icon', an attacker can take advantage...

BlazeDVD Pro 7.0.2.0 suffers from a buffer overflow vulnerability

BlazeVideo is a company dedicated to the development, production and marketing of multimedia entertainment applications for PCs and mobile devices. A buffer overflow vulnerability exists in BlazeDVD Pro 7.0.2.0, which stems from a failure to perform checksums when processing parsed PLF files, and...

Code Execution Vulnerabilities in the Backend of OurPHP AoP Building System V1.8.3

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OurPHP OURPHP website builder system V1.8.3 code execution vulnerability exists in the background, attackers can use the vulnerability to obtain control of t...

LibSSH Flaw Allows Hackers to Take Over Servers Without Password

A four-year-old severe vulnerability has been discovered in the Secure Shell SSH implementation library known as Libssh that could allow anyone to completely bypass authentication and gain unfettered administrative control over a vulnerable server without requiring a password. The security...

EnableQ Online Questionnaire Engine V10 Full Version Code Execution Vulnerability in Frontend

EnableQ online survey engine is a universal online survey management platform developed by Beijing Covey Nengdang Information Technology Co. A code execution vulnerability exists in the frontend of EnableQ Online Survey Engine V10 full version. An attacker can exploit the vulnerability to execute...

Code Execution Vulnerability in Kolon Enterprise CMS v1.7.3

Kelong Enterprise CMS is a content management system launched by Zhangzhou Kelong Weite Electronic Co. A code execution vulnerability exists in KeLong Enterprise CMS v1.7.3, which can be exploited by attackers to gain control of a web server...

File uploading vulnerability in Dreamline Enterprise website building system

Dream line business enterprise station building system is to use PHP + MySQL way to run the open source station building system. Dreamline enterprise website builder system file upload vulnerability, an attacker can use the vulnerability to upload any file, get the control of the web server...

Command Execution Vulnerability in YIXUNCMS Backend

YIXUNCMS is a showcase website system developed by Yixun Software Studio for small and medium-sized enterprises, using PHP language and with a stable MYSQL database. YIXUNCMS backend has a command execution vulnerability that can be exploited by attackers to insert Trojan horse files to gain...

ShopsN open source online store full system RechargeController page there are code execution vulnerabilities

ShopsN free version of the B2C e-commerce is a Shanghai Yisu Network Technology Co., Ltd. in line with the enterprise-level commercial standards full-featured really allow free commercial use of open source online store full network system. ShopsN v2.3.5 official version of the RechargeController...

ShopsN open source online store full system PayOrderController page there are code execution vulnerabilities

ShopsN free version of the B2C e-commerce is a Shanghai Yisu Network Technology Co., Ltd. in line with the enterprise-level commercial standards full-featured really allow free commercial use of open source online store full network system. ShopsN v2.3.5 official version of the PayOrderController...

Code Execution Vulnerabilities in YunYu CMS Enterprise Website Management System v1.1.4 Substation Version

Yunyou CMS enterprise website management system is a professional marketing enterprise building system based on PHP + MYSQL as the core development. CloudUnion CMS Enterprise Website Management System v1.1.4 Substation Edition suffers from a code execution vulnerability, which can be exploited by...

Command Execution Vulnerability in ThinkLC Backend

ThinkLC is a classified information system developed by SaxueCMS. A command execution vulnerability exists in the backend of ThinkLC, which can be exploited by an attacker to upload a Trojan horse file at the upload template in the backend and gain control of the web server...

Code Execution Vulnerability in OURPHP Backend Templates

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP background template code execution vulnerabilities, attackers can use the vulnerability to obtain control of the web server...