CVE-2021-42655

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability...

CVE-2021-42655

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability (CVE-2021-42655). Public references in the connected documents identify the vulnerable endpoint as the API at /api/pages/cms/libraryText/list. The CVE details indicate a SQL injection issue with high-severity impact (CVSS v3.1: ...

CVE-2021-42654

SiteServer CMS

CVE-2021-42654

SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...

CVE-2021-42654: Unrestricted Upload of File with Dangerous Type

SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...

CVE-2021-42656: Improper Neutralization of Input During Web Page Generation

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting XSS vulnerability...

SiteServer CMS SQL注入漏洞

SiteServer CMS is a content management system CMS from Beijing Bailong Thousand Domain Software Technology Development Company. SQL injection vulnerability exists in SiteServer CMS V6.15.51. An attacker can exploit this vulnerability to perform sql injection...

SiteServer CMS 跨站脚本漏洞

SiteServer CMS is an open source Content Management System CMS from China's BioRenewable Software Technology Development Company. A security vulnerability exists in SiteServer CMS version V6.15.51, which is caused by a cross-site scripting issue...

CVE-2021-42655: Improper Neutralization of Special Elements used in an SQL Command

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability...

RCE in SiteServer CMS

SiteServer CMS v7.x, which SiteServer UI relies on, allows attackers to execute arbitrary code via a crafted plug-in...

GHSA-Q469-J32F-H7VM RCE in SiteServer CMS

SiteServer CMS v7.x, which SiteServer UI relies on, allows attackers to execute arbitrary code via a crafted plug-in...

CVE-2022-28118

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...

CVE-2022-28118

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...

Code injection

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...

CVE-2022-28118

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...

CVE-2022-28118

CVE-2022-28118 : SiteServer CMS v7.x is vulnerable to remote code execution via a crafted plug-in. The underlying issue is described as improper input validation in the plug-in feature, enabling an attacker to execute arbitrary code on affected systems. Multiple sources corroborate an RCE in Site...

SiteServer CMS 代码注入漏洞

SiteServer CMS is an open-source content management system CMS from China's Bairong Thousand Domains Software Technology Development Company. A code injection vulnerability exists in SiteServer CMS version 7.x. The vulnerability stems from improper input validation in a plug-in feature...

CVE-2022-28118: Undefined Security Weakness

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in...

Arbitrary File Download Vulnerability in SiteServer CMS

SiteServer CMS is open source, cross-platform, enterprise-class CMS content management system. SiteServer CMS suffers from an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in SiteServer CMS Backend

SiteServer CMS is an open source and free enterprise-level CMS system developed by Beijing Baiyong Qianwei Software Technology Development Co. A SQL injection vulnerability exists in the backend of SiteServer CMS. An attacker can exploit the vulnerability to obtain sensitive information in the...