Shenzhen Microcosmos Interactive Limited Wecenter Learning Free Edition has a file upload vulnerability

WeCenter is an open source knowledge-based social Q&A community program that focuses on organizing, categorizing and retrieving community content, and distributing it by connecting to the WeChat public platform and mobile APP. Shenzhen WeCenter has a file upload vulnerability that can be exploite...

Sichuan Zhongwang Shengteng Technology Co., Ltd. school management system has logic flaws and vulnerabilities

The Academic Management System AMS is a management system that displays departmental information for the school and publishes relevant notices and announcements and school news. There is a logic flaw vulnerability in the system that can be exploited by an attacker to gain administrator privileges...

Command Execution Vulnerability in CRMEB Open Edition V3.1.0

CRMEB mall system is based on ThinkPhp6.0 + Vue development of a set of new retail mobile e-commerce system, CRMEB system is a set of customer relationship management + marketing e-commerce system, can quickly accumulate customers, member data analysis, intelligent conversion of customers,...

Code Execution Vulnerability in ETA CMS (CNVD-2020-26408)

ETA CMS is a simple, practical and efficient website builder. A code execution vulnerability exists in EDA CMS, which can be exploited by an attacker to gain control of a web server...

CVE-2020-7575

A vulnerability has been identified in Climatix POL908 BACnet/IP module All versions, Climatix POL909 AWM module All versions V11.32. A persistent cross-site scripting XSS vulnerability exists in the web server access log page of the affected devices that could allow an attacker to inject arbitra...

CVE-2018-16871

A flaw was found in the Linux kernel's NFS implementation. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the...

Mcms has a file upload vulnerability (CNVD-2020-27934)

Mcms is a web site building system of MINGFEI TECHNOLOGY CO. Mcms suffers from a file upload vulnerability that can be exploited by an attacker to gain server administrator privileges...

WordPress Plugin Event-Registration Arbitrary File Upload Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. An arbitrary file upload vulnerability exists in the WordPress plugin Event-Registration,...

File Upload Vulnerability in Scarecrow Enterprise Website

The Inari Enterprise Station is an open source simple and compact free enterprise website system based on PHP+Sqlite/MySQL. Scarecrow Enterprise Station has a file upload vulnerability that can be exploited by attackers to gain access to the web server...

JunAms content management system suffers from a file upload vulnerability (CNVD-2020-24740)

JunAMS is an open source content management system with ThinkPHP as its framework. JunAMS content management system has a file upload vulnerability that can be exploited by an attacker to upload a webshell and gain server privileges...

JunAms content management system suffers from a file upload vulnerability (CNVD-2020-24739)

JunAMS is an open source content management system with ThinkPHP as its framework. JunAMS content management system has a file upload vulnerability that can be exploited by an attacker to write a webshell and gain server privileges...

File Upload Vulnerability in Enterprise Website Building System of Zibo Shining Network Technology Co.

Zibo Shining Network Technology Co., Ltd. enterprise station-building system a specialized enterprise station-building solutions for the product. There is a file upload vulnerability in the Zibo Shining Network Technology Co., Ltd. system that can be exploited by an attacker to gain access to the...

CVE-2020-10804

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php. A malicious user with access to the server could create a crafted username, and then...

CVE-2020-10804

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php. A malicious user with access to the server could create a crafted username, and then...

CVE-2020-10804

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php. A malicious user with access to the server could create a crafted username, and then...

CVE-2020-10804

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php. A malicious user with access to the server could create a crafted username, and then...

CVE-2019-16064

NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and directories stored outside of the web root folder. By exploiting this vulnerability, it is possible for an attacker to list operating-system directory...

Hubei Tao code thousand dimensional information technology limited company gold micro cell phone mall system file upload vulnerability

Jinwei mobile mall system is suitable for micro-business customers with public number, imitating the page layout of the hand Tao, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory...

Johnson Controls Metasys XML External Entity Injection Vulnerability

Johnson Controls Metasys is a building automation system from Johnson Controls. The system can be networked with weak electronic systems such as fire and security through a variety of open protocols or standard interfaces to provide system integrity for secure access. An XML external entity...

Denial of Service Vulnerability in ZTE ZXR10 1800-2S

The ZTE ZXR10 1800-2S is a multi-service smart router manufactured by ZTE Corporation. A denial of service vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit the vulnerability to reboot the device, causing a denial of service, and the router to go out of management, and then...