DUXCMS suffers from a file upload vulnerability (CNVD-2021-19800)

DUXCMS is a general-purpose open source program for small and large companies, enterprises, governments, etc., based on PHP+MYSQL and written in CANPHP framework. DUXCMS has a file upload vulnerability that can be exploited by attackers to gain control of a web server...

Command Execution Vulnerability in Knight CMS of Taiyuan Xunyi Technology Co. Ltd (CNVD-2021-19735)

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS command execution vulnerabilities, attackers can use the vulnerability to obtain control of the web server...

File Upload Vulnerability in JPress 3.3.0 Backend

JPress a product developed using Java, similar to WordPress. Born to integrate the WeChat ecosystem, simple and easy to get started. Dedicated to creating an autonomous self-owned marketing platform for enterprises, using technology to help enterprises marketing cash. JPress3.3.0 there is a file...

XML External Entity Injection Vulnerability in Smartbi of Guangzhou Sematic Software Co.

Smartbi is a business intelligence BI software. Smartbi by Guangzhou Sematic Software Co. Ltd. suffers from an XML external entity injection vulnerability that can be exploited by an attacker to gain control of the server...

File upload vulnerability in kitecms backend

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP 5.1. version of the development, applicable to individuals and enterprises to quickly build a station and development needs. kitecms backend file upload vulnerability , attackers can exploit the...

Code Execution Vulnerability in ZengCMS 1.0.0 Backend

ZengCMS is a backend management system based on the latest TP6.0.x framework and Layui 2.5.x. A code execution vulnerability exists in the ZengCMS 1.0.0 backend, which can be exploited by attackers to gain control of the server...

Janus Signature Vulnerability in App Store

Application Treasure is a mobile application acquisition platform created by Tencent Application Center for smartphone users. A Janus signature vulnerability exists in AppBao, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in ZengCMS 1.0.0 Backend

ZengCMS is a backend management system based on the latest TP6.0.x framework and Layui 2.5.x. A file upload vulnerability exists in the ZengCMS 1.0.0 backend, which can be exploited by attackers to gain control of the server...

Stack overflow vulnerability in wps text

wps text is a text editing and processing software. A stack overflow vulnerability exists in wps text, which can be exploited by an attacker to gain control of the server...

Niushop open source mall file upload vulnerability

Niushop open source mall is a PHP open source mall system . Niushop open source mall file upload vulnerability , an attacker can use this vulnerability to obtain server control privileges...

Command Execution Vulnerability in RG-NBR Series Routers

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A command execution vulnerability exists in RG-NBR series routers, which c...

File Upload Vulnerability in OurPHP Admin Backend

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. A file upload vulnerability exists in the administrative backend of OurPHP, which allows attackers to gain control of the web server...

File Upload Vulnerability in Sichuan Situzhi Travel Software Co.

Sichuan Situzhi Travel Software Co., Ltd. is a company focusing on providing digitalization, informatization and intelligence services for the development of intelligent tourism in the whole region. A file upload vulnerability exists in the website building system of Sichuan Situo Intelligent...

Aggressive 750W Command Execution Vulnerability in Shanghai Atech Technology Co.

Ltd. Aggressive 750W is an enterprise-grade wireless router. A command execution vulnerability exists in the Atech Shanghai Aggressive 750W, which can be exploited by an attacker to gain control of a web server...

File upload vulnerability in waychar enrollment system (CNVD-2021-16014)

The waychar registration system is a tournament official website deployment service that enables one-stop deployment of official websites. A file upload vulnerability exists in the waychar registration system, which can be exploited by an attacker to gain server control privileges...

Command Execution Vulnerability in XYCMS

XYCMS studio training structure source code is a training organization website source code developed in asp access. XYCMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

UFIDA Software Corporation UFIDA U8 Remote Existence Command Execution Vulnerability

UFIDA is an integrated, converged and ecological enterprise cloud service provider. A command execution vulnerability exists in UFIDA U8 Remote of UFIDA Software Corporation, which can be exploited by attackers to gain control of a server...

EmpireCMS suffers from a code execution vulnerability (CNVD-2021-17381)

EmpireCMS Empire Content Management System is an open source content management system CMS. A code execution vulnerability exists in EmpireCMS 7.5, which can be exploited by an attacker to gain control of the server...

Code execution vulnerability in Ocean CMS (CNVD-2021-25370)

Ocean CMS, also known as SEACMS, is completely open source and free of charge, adaptive to computers, cell phones, tablets, APP multi-terminal, no encryption, more secure, it is your best station-building tool! Ocean CMS code execution vulnerabilities, attackers can use the vulnerability to obtai...

Command Execution Vulnerability in zzzcms V1.5.1

zzcms is a free open source website building system, mainly facing the majority of webmasters to use, do not need authorization, can be free of charge commercially. zzzcms V1.5.1 sa.php file in the command execution vulnerability, an attacker can use the vulnerability to obtain server control...