File inclusion vulnerability in 115CMS backend In***.php file

115CMS is a content management system developed on ThinkPHP framework. A file inclusion vulnerability exists in the 115CMS backend In.php file. An attacker can exploit this vulnerability to upload arbitrary files and gain control of the web server...

Arbitrary File Deletion Vulnerability in SIYUCMS

SIYUCMS is a content management system based on the latest version of ThinkPHP-5.1.X framework with AdminLTE in the backend front-end framework. SIYUCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...

115CMS has a flawed logic vulnerability

115CMS is a content management system developed on ThinkPHP framework. 115CMS has a logic flaw vulnerability that can be exploited by attackers to obtain authentication codes and change user passwords...

File upload vulnerability exists in CRMEB Open Edition V2.6.13.

CRMEB mall system is based on ThinkPhp6.0 + Vue development of a set of new retail mobile e-commerce system, CRMEB system is a set of customer relationship management + marketing e-commerce system, can quickly accumulate customers, member data analysis, intelligent conversion of customers,...

Rainy novel cms 1.2.2 background template management function there are directory traversal vulnerabilities

Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. A directory traversal vulnerability exists in the backend template management feature of Drizzle Novel cms 1.2.2. Attackers can use the vulnerability to view file...

ThinkPHP - Multiple PHP Injection RCEs (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ThinkPHP Multiple PHP Injection RCEs', 'Description' = %q This module exploits one of two PHP injection vulnerabilities in the ThinkPHP web...

ThinkPHP 5.0.23 Remote Code Execution Exploit

This Metasploit module exploits one of two PHP injection vulnerabilities in the ThinkPHP web framework to execute code as the web user. Versions up to and including 5.0.23 are exploitable, though 5.0.23 is vulnerable to a separate vulnerability. The module will automatically attempt to detect the...

ThinkPHP 5.0.23 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ThinkPHP Multiple PHP Injection RCEs', 'Description' = %q This module exploits one of two PHP injection vulnerabilities in the ThinkPHP web...

ThinkPHP suffers from SQL injection vulnerability (CNVD-2020-25573)

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. ThinkPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

115CMS suffers from XSS vulnerability

115CMS is a content management system developed with ThinkPHP framework. 115CMS suffers from an XSS vulnerability that can be exploited by attackers to execute malicious scripts and obtain administrator cookies...

Arbitrary File Read Vulnerability in kitecms 5.1.38

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development , suitable for individuals, enterprises to quickly build stations and development needs. kitecms 5.1.38 there is an arbitrary file reading vulnerability , attackers...

File upload vulnerability in kitecms 5.1.38 (CNVD-2020-27921)

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development , suitable for individuals, enterprises to quickly build stations and development needs. kitecms 5.1.38 file upload vulnerability , attackers can exploit the...

File Upload Vulnerability in kitecms 5.1.38

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development , suitable for individuals, enterprises to quickly build stations and development needs. kitecms 5.1.38 file upload vulnerability , attackers can use the vulnerabili...

Myucms 2.2.4 suffers from arbitrary file deletion vulnerability (CNVD-2020-27933)

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. Myucms 2.2.4 version of the arbitrary file deletion vulnerability exists . Attackers can use the vulnerability to damage and reload the syste...

Myucms 2.2.4 suffers from an arbitrary file deletion vulnerability (CNVD-2020-27932)

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. Myucms 2.2.4 version of the arbitrary file deletion vulnerability exists . Attackers can use the vulnerability to damage and reload the syste...

JunAms content management system suffers from a file upload vulnerability (CNVD-2020-24739)

JunAMS is an open source content management system with ThinkPHP as its framework. JunAMS content management system has a file upload vulnerability that can be exploited by an attacker to write a webshell and gain server privileges...

JunAms content management system suffers from a file upload vulnerability (CNVD-2020-24740)

JunAMS is an open source content management system with ThinkPHP as its framework. JunAMS content management system has a file upload vulnerability that can be exploited by an attacker to upload a webshell and gain server privileges...

JunAms content management system suffers from a file upload vulnerability (CNVD-2020-24741)

JunAMS is an open source content management system with ThinkPHP as its framework. JunAMS content management system has a file upload vulnerability that can be exploited by an attacker to upload a webshell and gain server privileges...

XSS vulnerability in 115CMS frontend

115CMS is an open source content management system developed with ThinkPHP framework. 115CMS has an XSS vulnerability in the frontend, which can be exploited by attackers to obtain sensitive information such as user cookies...

JunAms content management system suffers from SQL injection vulnerability (CNVD-2020-24743)

JunAMS is an open source content management system with ThinkPHP as its framework. The JunAMS content management system suffers from a SQL injection vulnerability that can be exploited by attackers to obtain database information...