Information leakage vulnerability in full version of TuziCMS

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...

Backup File Download Vulnerability in Yunyou CMS

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. CloudYou CMS has a backup file download vulnerability that can be exploited by attackers to download backup files and obtain sensitive information...

ThinkPHP has an information leakage vulnerability

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. ThinkPHP suffers from an information disclosure vulnerability. Attackers can use this vulnerability to obtain the database account and password, and successfully connect to...

JunAms Content Management System suffers from SQL Injection Vulnerability

JunAMS is an open source content management system with ThinkPHP as its framework. JunAms content management system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information about a database...

File Upload Vulnerability in 115CMS

115CMS is an open source content management system developed with ThinkPHP framework. 115CMS has a file upload vulnerability that can be exploited by attackers to gain control of a web server...

BeyongCms suffers from a file upload vulnerability (CNVD-2020-31488)

BeyongCms is a content management system based on ThinkPHP 5.1 framework. A file upload vulnerability exists in BeyongCms. An attacker can exploit this vulnerability to upload malicious files and gain administrative privileges on the server...

File upload vulnerability exists in BeyongCms (CNVD-2020-31490)

BeyongCms is a content management system based on ThinkPHP 5.1 framework. A file upload vulnerability exists in BeyongCms. An attacker can exploit this vulnerability to upload malicious files and gain administrative privileges on the server...

SIYUCMS 5.1 suffers from a command execution vulnerability (CNVD-2020-31713)

SIYUCMS is a content management system based on ThinkPHP5 + AdminLTE. SIYUCMS 5.1 suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands and gain administrative privileges on the web server...

SIYUCMS 5.1 Arbitrary File Deletion Vulnerability

SIYUCMS is a content management system based on ThinkPHP5 + AdminLTE. An arbitrary file deletion vulnerability exists in SIYUCMS version 5.1, which can be exploited by an attacker to delete arbitrary files...

File inclusion vulnerability in 115CMS backend In***.php file

115CMS is a content management system developed on ThinkPHP framework. A file inclusion vulnerability exists in the 115CMS backend In.php file. An attacker can exploit this vulnerability to upload arbitrary files and gain control of the web server...

Arbitrary File Deletion Vulnerability in SIYUCMS

SIYUCMS is a content management system based on the latest version of ThinkPHP-5.1.X framework with AdminLTE in the backend front-end framework. SIYUCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...

115CMS has a flawed logic vulnerability

115CMS is a content management system developed on ThinkPHP framework. 115CMS has a logic flaw vulnerability that can be exploited by attackers to obtain authentication codes and change user passwords...

File upload vulnerability exists in CRMEB Open Edition V2.6.13.

CRMEB mall system is based on ThinkPhp6.0 + Vue development of a set of new retail mobile e-commerce system, CRMEB system is a set of customer relationship management + marketing e-commerce system, can quickly accumulate customers, member data analysis, intelligent conversion of customers,...

Rainy novel cms 1.2.2 background template management function there are directory traversal vulnerabilities

Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. A directory traversal vulnerability exists in the backend template management feature of Drizzle Novel cms 1.2.2. Attackers can use the vulnerability to view file...

ThinkPHP - Multiple PHP Injection RCEs (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ThinkPHP Multiple PHP Injection RCEs', 'Description' = %q This module exploits one of two PHP injection vulnerabilities in the ThinkPHP web...

ThinkPHP 5.0.23 Remote Code Execution Exploit

This Metasploit module exploits one of two PHP injection vulnerabilities in the ThinkPHP web framework to execute code as the web user. Versions up to and including 5.0.23 are exploitable, though 5.0.23 is vulnerable to a separate vulnerability. The module will automatically attempt to detect the...

ThinkPHP 5.0.23 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ThinkPHP Multiple PHP Injection RCEs', 'Description' = %q This module exploits one of two PHP injection vulnerabilities in the ThinkPHP web...

ThinkPHP suffers from SQL injection vulnerability (CNVD-2020-25573)

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. ThinkPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

115CMS suffers from XSS vulnerability

115CMS is a content management system developed with ThinkPHP framework. 115CMS suffers from an XSS vulnerability that can be exploited by attackers to execute malicious scripts and obtain administrator cookies...

File upload vulnerability in kitecms 5.1.38 (CNVD-2020-27921)

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development , suitable for individuals, enterprises to quickly build stations and development needs. kitecms 5.1.38 file upload vulnerability , attackers can exploit the...