Webshell bypass vulnerability exists in D Shield (CNVD-2020-21033)

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to bypass D-Shield and gain access to the...

Weak Password Vulnerability in SIP Routing Distribution Server of Hangzhou Hangsheng Digital Equipment Technology Co.

The main function of SIP Routing and Distribution Server is to route SIP signaling, including SIP proxy stateful and stateless service and SIP registration and authentication service, providing location service and redirection service. Hangzhou Hangsheng Digital Equipment Technology Co., Ltd. SIP...

File Upload Vulnerability in EjuCMS

EjuCMS is a localized O2O real estate website platform system. EjuCMS has a file upload vulnerability that can be exploited by attackers to gain access to the server...

File Upload Vulnerability in 115CMS

115CMS hereinafter referred to as this product is developed on the face of the most popular current ThinkPHP framework, which is an efficient and open source content management system. 115CMS has a file upload vulnerability that can be exploited by attackers to gain access to the server...

Command Execution Vulnerability in seacms Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the seacms backend. An attacker can exploit this vulnerability to gain control of the web server...

8x8: Blind Command Injection #1

OS Command injection on text-to-speech functionality API. This issue arised because of the generic text to speech conversion tool being used here in the web application & because of the fact that the user input data was not being sanitised before taking it to the server for output of the inputed...

File upload vulnerability in jpress

JPress is a product developed in Java, similar to WordPress. Incorporating the microsoft ecosystem, the jpress has a file upload vulnerability that can be exploited by attackers to gain access to the web server...

File upload vulnerability in aitecms

AIT Content Management System aitecms is a customer information management system developed by php + MySQL the original dream core. aitecms there is a file upload vulnerability, the vulnerability is due to publish document module to upload pictures did not do the validation, the attacker can use...

Webshell Bypass Vulnerability in Web Security Dog (Apache Edition) V4.0

Website Security Dog is a server security protection software, is for IDC operators, web hosting service providers, enterprise hosts, server administrators and other users to provide server security prevention of the practical system, is a combination of website content security protection, websi...

Webshell Bypass Vulnerability in Web Security Dog APACHE Edition

Website Security Dog is a server security protection software, is for IDC operators, web hosting service providers, enterprise hosts, server administrators and other users to provide server security prevention of the practical system, is a combination of website content security protection, websi...

D Shield suffers from a webshell bypass vulnerability (CNVD-2020-22801)

D-Shield is an active defense protection software designed specifically for IIS to prevent websites and servers from being compromised with internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to bypass D-Shield and gain acce...

File upload vulnerability exists in CmsEasy (CNVD-2020-23793)

Ltd. CmsEasy Ease2Easy enterprise website system, also known as Ease2Easy enterprise website program, is Ease2Easy to develop China's first set of free enterprise website templates for marketing enterprise website management system, the system front html, fully SEO-compliant, as well as online...

File Upload Vulnerability in YunMOK

YunMOK cloud module is a free website management system launched by Nanchong Tiger Cloud Network Technology Co. A file upload vulnerability exists in YunMOK, which can be exploited by attackers to gain access to the web server...

MyuCMS open source content management system Fo***.php file file upload vulnerability

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. MyuCMS open source content management system Fo.php file file upload vulnerability . Attackers can use the vulnerability to upload webshell,...

Command Execution Vulnerability in V8+ Terminal Security System of Beijing Kingsoft Security Management System Technology Co.

Kingsoft v8+ Terminal Security System is a new generation of enterprise terminal security software, the product can dynamically detect, real-time processing, network-wide traceability of unknown threats in the user network. Beijing Kingsoft Security Management System Technology Co., Ltd. V8+...

Hard-Coded Key Used For Remember-me Token in Opencast

Impact The security configuration in etc/security/mhdefaultorg.xml enables a remember-me cookie based on a hash created from the username, password, and an additional system key. Opencast has hard-coded this system key in the large XML file and never mentions to change this, basically ensuring th...

File upload vulnerability in Up***.php file of Bitter Chrysanthemum OA Office System

Bitter Chrysanthemum OA office system is suitable for small and medium-sized enterprises, general-purpose collaborative OA management software, incorporating Bitter Chrysanthemum OA's rich experience in management software development for a long time and advanced technology, the system adopts the...

Webshell Bypass Vulnerability in Web Security Dog (Apache Edition) (CNVD-2020-12884)

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition has a webshell bypass vulnerability. Attackers can use the vulnerability to bypass Web...

File Upload Vulnerability in the Conference Reservation System of Beijing Soomailian Network Technology Co.

Somai is a provider of professional digital signage solutions, Somai products include Rmeeting meeting reservation, information dissemination, visitor system, face recognition access control/gate, advertising machine, touch query machine, intelligent coffee table, interactive system, serving chai...

Command execution vulnerability in the PHPMyWind si***_sa***.php file

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A command execution vulnerability exists in the PHPMyWind sisa.php file. An attacker can exploit the vulnerability to execute commands and gain server privileges...