The vulnerability of the CMS system SDCMS, related to improper code generation, allows a hacker to execute arbitrary PHP code.

The vulnerability of the CMS system SDCMS is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

DEBIAN-CVE-2022-24953

The CryptGPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions...

WordPress plugin Simple JWT Login 安全特征问题漏洞

WordPress and others are products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language.WordPress plugin is an application plugin.PHP and others are products of.PHP is a scripting language that executes on the server side. A security feature issue...

WordPress 代码问题漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code issue vulnerability exists in WordPress theme Workreap that stems from...

OneNav 跨站脚本漏洞

OneNav is a minimalist navigation/bookmark management system developed using PHP. OneNav beta 0.9.12 suffers from a cross-site scripting vulnerability, which allows attackers to conduct XSS attacks via the Add Link feature...

CSZ CMS 跨站脚本漏洞

CSZ CMS is a PHP-based open source content management system CMS. CSZ CMS suffers from a cross-site scripting vulnerability that can be exploited to execute arbitrary web script or HTML via a specially crafted load entered in the "New Article" field under the "Article" plugin...

CVE-2021-25780

An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell...

Arbitrary File Deletion Vulnerability in songcms 3.16

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . songcms 3.16 arbitrary file deletion vulnerability , an attacker can use the...

Stored Cross-Site Scripting Vulnerability in UX365 Web Classifieds Navigation System

Uc365 website classification navigation system is a navigation management system based on PHP + MYSQL development and construction. A stored cross-site scripting vulnerability exists in the Uke365 Website Classifieds Navigation System. An attacker can exploit the vulnerability to obtain an...

Unauthorized Access Vulnerability in Feifei Movie Navigation System

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. There is an unauthorized access vulnerability in Feifei Movie Navigation System, which can be exploited by attackers to obtain sensitive information...

WordPress Drag and Drop Multi File Upload - Contact Form Code Issue Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Drag and Drop Multi File Upload - Contact Form is a drag-and-drop file upload and contact form plugin used in... A code issue...

File Containment Vulnerability in DM Building System (CNVD-2020-40756)

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website builder system has a file containment vulnerability , attackers can exploit the vulnerability to obtain server privileges...

Dream CMS LmxCMS has an arbitrary file deletion vulnerability

LmxCMS is developed using php language and mysql database, and adopts the mainstream MVC design model. Dream CMS LmxCMS has an arbitrary file deletion vulnerability that can be exploited by attackers to cause arbitrary file deletion...

SQL Injection Vulnerability in Heybbs se***.php File

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs se.php file has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Command Execution Vulnerability in SongCMS PHP Version

SongCMS PHP Edition is an open source CMS based on PHP+MySQL. SongCMS PHP Edition suffers from a command execution vulnerability that can be exploited by attackers to execute malicious code...

Heybbs Micro Community v1.2 suffers from SQL injection vulnerability (CNVD-2020-23507)

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs Micro Community v1.2 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Heybbs Micro Community

Heybbs micro community is a front-end based on bootstrap + js + css, back-end php + mysql development of community programs. Heybbs Micro Community suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in SemCMS SE***_Pr***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEPr.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

DEBIAN-CVE-2018-14553

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd not bundled...

UBUNTU-CVE-2020-7059

When using fgetss function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash...