MileagePlus open source blog system v2.2 has SQL injection vulnerabilities

Mile High Open Source Blog System is a blog system based on ThinkPHP development. MileagePlus Open Source Blog System v2.2 suffers from a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive database information...

MileagePlus open source blog system V2.0 suffers from SQL injection vulnerabilities

MileagePlus Blog System is a blog system based on ThinkPHP development. MileageMi Open Source Blog System V2.0 suffers from a SQL injection vulnerability, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

Code Execution Vulnerability in ShuipFCMS

ShuipFCMS is a content management system based on ThinkPHP framework as the core and developed in an independent grouping approach. ShuipFCMS suffers from a code execution vulnerability that can be exploited by an attacker to gain control of the web server...

Directory Traversal Vulnerability in RGCMS

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS has a directory traversal vulnerability that can be exploited by an attacker to view the list of...

XSS vulnerability in Guojiz

Guojiz is a light community system based on layui front-end framework and thinkphp. Guojiz has an XSS vulnerability that can be exploited by an attacker to obtain an administrator cookie...

Arbitrary File Download Vulnerability in RGCMS

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS arbitrary file download vulnerability, an attacker can use the vulnerability to read any file in th...

Guojiz Change Password Interface Has Arbitrary User Privilege Vulnerability

Guojiz is a light community system based on layui front-end framework and thinkphp. Guojiz password change interface has any user privilege vulnerability, an attacker can use this vulnerability to modify any user's data table information, so as to enhance their own or other people's privileges...

Arbitrary File Deletion Vulnerability in RGCMS Fi***.php File

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS Fi.php file exists in any file deletion vulnerability, an attacker can use this vulnerability to...

WTCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-34388)

WTCMS is a ThinkPHP-based content management system CMS. A cross-site request forgery vulnerability exists in WTCMS version 1.0, which can be exploited by an attacker to send unintended requests to the server via an affected client...

NoneCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-35786)

NoneCMS is a content management system CMS based on Thinkphp. A cross-site request forgery vulnerability exists in the public/index.php/admin/admin/dele.html page in NoneCMS v1.3, which can be exploited by an attacker to send an unintended request to the server via an affected client...

Code Execution Vulnerability in Thunderwind Movie CMS (CNVD-2019-33540)

Thunderwind Movie CMS is a PHP based THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. Thunderwind CMS has a code execution vulnerability that can be exploited by attackers to gain control of the web...

Code Execution Vulnerability in RGCMS

RGCMS is an open source building management system, written in PHP language, with Thinkphp 5.1 framework and MYSQL database. RGCMS code execution vulnerability, an attacker can use the vulnerability to obtain server privileges...

Code execution vulnerability in yershop

yershop open source online store system is a thinkphp5-based mall system with a key to generate controllers , models , validators , templates , general additions and deletions , and other functions. yershop code execution vulnerability exists in the background , an attacker can exploit the...

File upload vulnerability in yershop

yershop open source online store system is a thinkphp5 based mall system , with a key to generate the controller , model , validator , template , general additions and deletions and other functions . yershop backend file upload vulnerability , attackers can exploit the vulnerability to obtain...

xss vulnerability in shuipfcms

ShuipFCMS is a content management system based on ThinkPHP framework as the core, using the independent grouping approach to development. Shuipfcms has an xss vulnerability. Attackers can use this vulnerability to obtain administrator cookies...

Hsycms SQL Injection Vulnerability

Hsycms is a content management system CMS based on ThinkPHP. The system has features such as in-site linking, site map, full-site pseudo-static and custom URL URLs. A SQL injection vulnerability exists in Hsycms V1.1. The vulnerability stems from the lack of validation of externally entered SQL...

NoneCMS ThinkPHP Remote Code Execution (CVE-2019-9082)

...

File Upload Vulnerability in YFCMF Im***.p*** Page

YFCMF is a backend content management framework using ThinkPHP 5.1. + foreign ACE 1.40 UI template. A file upload vulnerability exists in the YFCMF Im.p page, which can be exploited by an attacker to gain server privileges...

Arbitrary File Deletion Vulnerability in FastAdmi

FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...

NoneCMS ThinkPHP Remote Code Execution (CVE-2018-20062)

A remote code execution vulnerability exists in NoneCMS ThinkPHP framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...