Code Execution Vulnerabilities in Knight CMS Backend of Taiyuan Xunyi Technology Co.

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS code execution vulnerabilities exist in the background. Attackers can exploit the vulnerability to obtain control of the server...

CVE-2020-35339

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

Remote code execution

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

CVE-2020-35339

CVE-2020-35339 affects 74CMS version 5.0.1. A remote code execution vulnerability exists in the files /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php, allowing an attacker to obtain server permissions and control the server. The issue is documented with...

Command Execution Vulnerability in Chengdu Zero Takeoff Network 07FLY-CRM V1

07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...

Chengdu Zero Takeoff Network 07FLY-CRM V1 Exists File Upload Vulnerability

07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...

File Upload Vulnerability in Zero Takeoff Customer Relationship Management System

Chengdu Zero Takeoff Network is an information service provider, mainly dedicated to the Internet basic business, website construction, management system, software customization, optimization and promotion, e-commerce operations and other full range of information technology services. There is a...

Windows Defender AMSI has a binary vulnerability

Microsoft English name: Microsoft; Chinese name: Microsoft Corporation or American Microsoft Corporation is an American multinational technology company that focuses on the business of developing, manufacturing, licensing, and providing a wide range of computer software services. A binary...

XML Entity Injection Vulnerability in Training and Exam System of Beijing Yunfan Internet Technology Co.

Beijing Yunfan Internet Technology Co., Ltd. business scope includes: technology development, technology promotion, technology transfer, technology consulting, technical services and so on. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists XML entity injection...

File Upload Vulnerability in E-office OA Self-service Platform of Shanghai Panmicro Network Technology Co.

E-office OA self-service platform is a professional collaborative OA software for small and medium-sized organizations. A file upload vulnerability exists in the E-office OA self-service platform of Shanghai Panmicro Network Technology Co., Ltd. that can be exploited by an attacker to gain contro...

Command Execution Vulnerability in Kingdee KIS Flagship Edition of Kingdee Software Ltd.

Kingdee KIS is an ERP software. A command execution vulnerability exists in Kingdee KIS Flagship Edition of Kingdee Software Limited, which can be exploited by an attacker to gain server control privileges...

File Uploading Vulnerability in the Web-based Training Platform of Beijing Boswell Information Technology Co.

Ltd. is one of the "one-stop" providers of e-learning, online examination and knowledge management software products and their total solutions. A file upload vulnerability exists in the online training platform of Beijing Boshiway Information Technology Co., Ltd, which can be exploited by attacke...

Ltd. into the cloud cms there are file upload vulnerability

Shenzhen Jin Yun Software Technology Co., Ltd. mainly provides services such as Internet software development, including mobile APP, mobile webpage, WeChat public platform services, cloud services and so on. Ltd. into the cloud cms file upload vulnerability, attackers can use the vulnerability to...

File Upload Vulnerability in We7 CMS

We7 CMS is a content management system based on asp.net development. A file upload vulnerability exists in We7 CMS, which can be exploited by an attacker to gain server control privileges...

File Upload Vulnerability in Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Co.

Ticketmaster ERP Management System is a specialized ticket management system for airline ticketing agents. A file upload vulnerability exists in the Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Company Limited, which can be exploited by an attacker to gain contro...

Command Execution Vulnerability in JTopCMS Backend of Hefei Mingjing Information Technology Co.

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS back-end command execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

Command Execution Vulnerability in GOCLOUD-ISP1000 and GOCLOUD-ISP2000

Shanghai Guoyun Information Technology Co., Ltd. is a provider of intelligent network products and services. A command execution vulnerability exists in GOCLOUD-ISP1000 and GOCLOUD-ISP2000, which can be exploited by an attacker to gain control of a web server...

Command execution vulnerability in Five Fingers CMS backend (CNVD-2021-16339)

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS backend has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

File upload vulnerability exists in ShopXO (CNVD-2021-15972)

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in Fast Reach CMS (CNVD-2021-15975)

Fast Row CMS is open source and free PHP enterprise website production, construction, development and optimization of SEO management system. FPS CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...