File upload vulnerability in phpcms

PHPCMS uses PHP5+MYSQL as the technical basis for development.V9 uses OOP object-oriented approach to build the basic operational framework. A file upload vulnerability exists in phpcms, which can be exploited by attackers to gain control of the web server...

SQL Injection Vulnerability in seacms Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A SQL injection vulnerability exists in the seacms backend. An attacker can exploit this vulnerability to gain control of the web server...

Remote File Inclusion (RFI) – Detecting the Undetectable

Intro Remote File Inclusion RFI is an attack exploiting the functionality in web applications which allows the inclusion of external source code without validating its content or origin. An RFI payload is a link that points to a malicious file that an application will include in its code example:...

Webshell Bypass Vulnerability in D-Shield of Shenzhen DiYuan Technology Co.

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield has a Webshell bypass vulnerability, which can be exploited by attackers to gain access to the control of the target server...

Signature Validation Bypass

Overview electron-updater is a module allowing applications to implement auto-update functionality. Affected versions of this package are vulnerable to Signature Validation Bypass. The signature verification check is based on a string comparison between the installed binary’s publisherName and th...

Command execution vulnerability in multiple D-Link routers (CNVD-2020-15533)

The D-Link DIR-878, DIR-882, and DIR-867 are all router products from AUO D-Link. A command execution vulnerability exists in multiple D-Link routers, which can be exploited by an attacker to gain control of a web server...

Xiamen Service Cloud Information Technology Co., Ltd. security dog suffers from webshell bypass vulnerability

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. Xiamen Service Cloud Information Technology Co., Ltd. security dog there is a webshell bypass vulnerability, attackers can use the vulnerability to obtain the target...

Concrete CMS: Remote Code Execution (Reverse Shell) - File Manager

Remote Code Execution Reverse Shell - File Manager • Title: concrete5-8.5.2 Remote Code Execution - Reverse Shell • Keyword: crayons • Software : concrete5 • Product Version: 8.5.2 • Vulnerability : Remote Code Execution - Reverse Shell • Vulnerable component: File Manager The attacker needs the...

File upload vulnerability exists in super cms (CNVD-2020-13574)

Super cms content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

File Upload Vulnerability in Laike E-commerce System (CNVD-2020-13871)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laike E-commerce system, which can be exploited by attackers to gain control of the web server...

Command Execution Vulnerability in XYHCMS Backend Sy***.cl***.php File

XYHCMS Xingyunhai CMS is a completely open source CMS content management system. A command execution vulnerability exists in the XYHCMS backend Sy.cl.php file. Attackers can use the vulnerability to obtain control of the server...

File Upload Vulnerability in hybbs v2.3.2

HYBBS is a PHP website program that supports plugin extensions and template extensions. A file upload vulnerability exists in hybbs v2.3.2, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Netnew Enterprise Website Management System

Netnew enterprise website management system is an ASP + ACCESS environment based on the development of website management system. A file upload vulnerability exists in Netnew Enterprise Website Management System, which can be exploited by an attacker to gain control of the web server...

Command Execution Vulnerability in OECMS

OECMS enterprise website system is a set of enterprise building system based on the development of OEPHP architecture system development. OECMS has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

BigTree CMS Deserialization Vulnerability

BigTree CMS is a small open source cms based on PHP and Mysql. BigTree CMS has a deserialization vulnerability that can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in PowerCreator CMS

PowerCreator is a software development and product manufacturing company for the global audio and video industry. A file upload vulnerability exists in PowerCreator CMS, which can be exploited by an attacker to gain control of the web server...

Code execution vulnerability in dw*** parameter of ad***_we***.php file in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adwe.php file dw parameter there is a code execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

Code execution vulnerability in the ad***_we***.php file is*** parameter in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adwe.php file is parameter there is a code execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

Remote Code Execution Vulnerability in EmpireCMS

EmpireCMS is a content management system CMS. EmpireCMS suffers from a remote code execution vulnerability that can be exploited by an attacker to gain control of the web server...

Command Execution Vulnerability in MyuCMS v2.1.1020

MyuCMS is a content management system developed using ThinkPHP. A command execution vulnerability exists in MyuCMS v2.1.1020, which can be exploited by an attacker to gain control of a web server...