Lucene search
K

16 matches found

CNNVD
CNNVD
added 2024/10/28 12:0 a.m.0 views

EyouCms 安全漏洞

EyouCms is an open source content management system CMS based on ThinkPHP by China Eyou Eyou. A security vulnerability exists in EyouCMS v1.6.7, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to obtain sensitive information by scripting the post...

6.1CVSS5.9AI score0.00157EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/03/11 12:0 a.m.2 views

Hsycms 跨站脚本漏洞

Hsycms is a content management system CMS based on ThinkPHP. The system has features such as in-site linking, sitemap, full-site pseudo-static and custom URL URLs. A cross-site scripting vulnerability exists in Hsycms version 3.1, which stems from a security issue in the file controllercate.php i...

6.1CVSS4.5AI score0.00269EPSS
Exploits0References4
CNVD
CNVD
added 2022/08/23 12:0 a.m.24 views

EyouCms Cross-site Request Forgery Vulnerability (CNVD-2022-59207)

Zanzan Web Technology EyouCms Eyou CMS is a ThinkPHP-based open source content management system CMS from Zanzan Web Technology in China. version V1.5.8 of EyouCMS has a security vulnerability that stems from the existence of cross-site request forgery CSRF vulnerabilities through the backend,...

8.8CVSS1.9AI score0.00209EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/08/19 12:0 a.m.2 views

EyouCms 跨站请求伪造漏洞

Zanzan Web Technology EyouCms Eyou CMS is a ThinkPHP-based open source content management system CMS from Zanzan Web Technology in China. version V1.5.8 of EyouCMS has a security vulnerability that stems from the existence of cross-site request forgery CSRF vulnerabilities through the backend,...

8.8CVSS6.9AI score0.00209EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/14 12:0 a.m.2 views

EyouCms安全漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms, which originates from eyouCMS V1.5.5-UTF8-SP31 Deletion of arbitrary files due to insufficient parameter...

8.1CVSS7.9AI score0.00234EPSS
Exploits1References2
CNVD
CNVD
added 2021/09/02 12:0 a.m.20 views

WTCMS Cross-site Request Forgery Vulnerability (CNVD-2021-69267)

WTCMS is a content management system CMS based on ThinkPHP. index.php?g=admin in WTCMS...

6.5CVSS1.6AI score0.00098EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/09/01 12:0 a.m.3 views

WTCMS 跨站脚本漏洞

WTCMS is a content management system CMS based on ThinkPHP. a cross-site scripting vulnerability exists in the link address field under the link module of the WTCMS backend. No details of the vulnerability are currently available...

5.4CVSS5.2AI score0.00261EPSS
Exploits1References2
CNVD
CNVD
added 2020/06/16 12:0 a.m.1 views

Command Execution Vulnerability in Guojiz International Web Site Navigation System (CNVD-2020-41759)

Guojiz International Website Navigation System is a navigation system based on thinkphp. There is a command execution vulnerability in the Guojiz international website navigation system that can be exploited by an attacker to gain server control privileges...

7.4AI score
Exploits0
CNVD
CNVD
added 2020/04/01 12:0 a.m.1 views

Myucms 2.2.4 suffers from an arbitrary file deletion vulnerability (CNVD-2020-27932)

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. Myucms 2.2.4 version of the arbitrary file deletion vulnerability exists . Attackers can use the vulnerability to damage and reload the syste...

7.1AI score
Exploits0
CNVD
CNVD
added 2020/04/01 12:0 a.m.2 views

Myucms 2.2.4 suffers from arbitrary file deletion vulnerability (CNVD-2020-27933)

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. Myucms 2.2.4 version of the arbitrary file deletion vulnerability exists . Attackers can use the vulnerability to damage and reload the syste...

7.1AI score
Exploits0
CNVD
CNVD
added 2019/09/23 12:0 a.m.3 views

NoneCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-35786)

NoneCMS is a content management system CMS based on Thinkphp. A cross-site request forgery vulnerability exists in the public/index.php/admin/admin/dele.html page in NoneCMS v1.3, which can be exploited by an attacker to send an unintended request to the server via an affected client...

6.5CVSS6.9AI score0.00117EPSS
Exploits1References1
CNVD
CNVD
added 2019/03/12 12:0 a.m.1 views

File Upload Vulnerability in WTCMS

WTCMS is a content management system CMS based on Thinkphp. WTCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

7.2AI score
Exploits0
CNVD
CNVD
added 2019/02/19 12:0 a.m.2 views

WTCMS Cross-Site Scripting Vulnerability

WTCMS is a ThinkPHP-based content management system CMS. A cross-site scripting vulnerability exists in WTCMS version 1.0, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'statistic code' field...

6.1CVSS6AI score0.0024EPSS
Exploits1References1
CNVD
CNVD
added 2018/11/21 12:0 a.m.2 views

GreenCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-00334)

GreenCMS is a content management system CMS based on ThinkPHP. A cross-site request forgery vulnerability exists in GreenCMS version 2.3.0603. A remote attacker can exploit this vulnerability to delete log files with the help of the index.php?m=admin&c=data&a=clear URI...

6.5CVSS6.6AI score0.00098EPSS
Exploits1References1
CNVD
CNVD
added 2018/08/08 12:0 a.m.1 views

OneThink Cross-Site Request Forgery Vulnerability (CNVD-2018-14976)

Onethink is a ThinkPHP-based content management framework for web development . A cross-site request forgery vulnerability exists in the admin.php?s=/User/add.html page in OneThink version 1.1. A remote attacker can exploit this vulnerability to add users...

8.8CVSS8.8AI score0.00134EPSS
Exploits1References1
CNVD
CNVD
added 2017/06/06 12:0 a.m.1 views

WSTMALL Mall System v1.9.2 SQL Injection Vulnerability in pkey Parameter

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp , is a system that can help businesses and individuals to quickly build a community service system . WSTMALL mall system V1.9.2 version of the pkey parameter there is a SQL injection vulnerabilit...

7.8AI score
Exploits0
Rows per page
Query Builder