Command Execution Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group (CNVD-2021-51352)

Skyrise Technology Group is a leading provider of network security, big data and security cloud services in China. A command execution vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group, which can be exploited by an attacker to gain control of a server...

File Upload Vulnerability in ZDNT's Customer Resource Management System (CNVD-2021-51371)

ZDNT Customer Resource Management System is a foreign trade management and foreign trade customer management and other functions of the software. A file upload vulnerability exists in ZDARNT Customer Resource Management System, which can be exploited by attackers to gain control of the server...

File Containment Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A file inclusion vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of...

Code execution vulnerability in youdianCMS (CNVD-2021-51410)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has a code execution vulnerability that can be exploited by attackers to gain control ...

Textpattern CMS suffers from a file upload vulnerability (CNVD-2021-51401)

Textpattern CMS is a free open source content management system based on PHP and MySQL. A file upload vulnerability exists in Textpattern CMS version 4.8.7, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Jinhe C6 Collaboration Management Platform

Beijing Jinhe Network Co., Ltd. is a company that specializes in information networks. A file upload vulnerability exists in the Jinhe C6 Collaborative Management Platform, which can be exploited by an attacker to compromise a server...

File upload vulnerability in jeewms (CNVD-2021-51414)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can upload malicious files through the vulnerability , control the server...

Command Execution Vulnerability in Guangdong Todi Elib 4.1 Library Cluster Management System

Ltd. is a high-tech company, hereinafter referred to as "TODI Technology", has been engaged in the library management software research and development, and library RFID self-service equipment research and development and manufacturing, to provide library RFID system solutions. Guangdong toppy...

Command Execution Vulnerability in MuYuCMS

MuYuCMS based on Thinkphp development of a set of lightweight open source content management system, focusing on the company's enterprises, individual station owners to provide rapid construction of the station to provide solutions. MuYuCMS command execution vulnerability , an attacker can exploi...

Code Execution Vulnerability in Dream CMS

Dream CMS lmxcms is a simple and practical website management system cms. A code execution vulnerability exists in Dream CMS, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in ZengCMS (CNVD-2021-51826)

ZengCMS is a backend management system based on the latest TP6.0.x framework and Layui 2.5.x. ZengCMS suffers from a command execution vulnerability that can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in MuYuCMS (CNVD-2021-51821)

MuYuCMS based on Thinkphp development of a set of lightweight open source content management system, focusing on the company's enterprises, individual station owners to provide rapid construction of the station to provide solutions. MuYuCMS command execution vulnerability , an attacker can exploi...

Command Execution Vulnerability in Halo

Halo is a modern blog/CMS system. Halo suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Oracle's Website Marketing System

Oxbridge Website Marketing System is an open source content management system, the product is based on PHP+MYSQL architecture, and can run on Windows, Linux, MacOSX, Solaris and other various platforms. Oxbones Website Marketing System has a command execution vulnerability that can be exploited b...

File Upload Vulnerability in YouDianCMS (CNVD-2021-52065)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS file upload vulnerability, attackers can use the vulnerability to obtain server contro...

File Upload Vulnerability in Fisheye CMS (CNVD-2021-51875)

FishLeap CMS is a content management system specifically geared towards enterprise applications. A file upload vulnerability exists in Fishy CMS, which can be exploited by an attacker to write a malicious file to gain server control privileges...

Catfish CMS suffers from a file upload vulnerability (CNVD-2021-49557)

Catfish CMS is a free and open source PHP content management system. Catfish CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Catfish CMS suffers from a file upload vulnerability (CNVD-2021-49555)

Catfish CMS is a free and open source PHP content management system. Catfish CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

ThinkPHP has a deserialization vulnerability

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. ThinkPHP has a deserialization vulnerability that can be exploited by attackers to gain server control privileges...

Command Execution Vulnerability in Xiaodu Route AV Version

Xiaodu Router is a smart router product launched by Baidu, which can transmit cloud data at will and support remote download of audio and video resources. Xiaodu Router AV version has a command execution vulnerability, which can be exploited by attackers to obtain server control privileges...