Command execution vulnerability in 5UCMS (CNVD-2021-46895)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a command execution vulnerability, attackers can use this...

Command Execution Vulnerability in CLTPHP

CLTPHP is a website building system based on thinkphp. CLTPHP has a command execution vulnerability, through which an attacker can obtain server privileges...

NoneCMS Information Disclosure Vulnerability

NoneCMS is a content management system CMS based on Thinkphp. An information disclosure vulnerability exists in NoneCMS version 1.3. A remote attacker can exploit this vulnerability to obtain sensitive information via /nonecms/vendor...

Command Execution Vulnerability in 115CMS

115CMS integrated content management system is an efficient open source content management system developed using the most popular ThinkPHP framework. 115CMS has a command execution vulnerability that can be exploited by attackers to gain server control privileges...

NoneCMS Information Disclosure Vulnerability (CNVD-2021-45763)

NoneCMS is a content management system CMS based on Thinkphp. An information disclosure vulnerability exists in NoneCMS version 1.3. A remote attacker can exploit this vulnerability to obtain sensitive information via /public/index.php...

NoneCMS 信息泄露漏洞

NoneCMS is a content management system CMS based on Thinkphp. An information disclosure vulnerability exists in NoneCMS version 1.3. A remote attacker can exploit this vulnerability to obtain sensitive information via /nonecms/vendor...

NoneCMS 信息泄露漏洞

NoneCMS is a content management system CMS based on Thinkphp. An information disclosure vulnerability exists in NoneCMS version 1.3. A remote attacker can exploit this vulnerability to obtain sensitive information via /public/index.php...

SQL Injection Vulnerability in TPCMS

TPCMS is an open source cms written by thinkphp. TPCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

74CMS SQL Injection Vulnerability

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the id parameter of wap/wap-company-show.php...

74CMS SQL Injection Vulnerability (CNVD-2021-43389)

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...

74CMS SQL Injection Vulnerability (CNVD-2021-43391)

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the key parameter of plus/ajaxstreet.php...

74CMS SQL Injection Vulnerability (CNVD-2021-43390)

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the x parameter of ajaxofficebuilding.php...

74CMS SQL Injection Vulnerability (CNVD-2021-43380)

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the query parameter of plus/ajaxcommon.php...

迅易科技 74cms SQL注入漏洞

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the key parameter of plus/ajaxstreet.php...

迅易科技 74cms SQL注入漏洞

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the x parameter of ajaxofficebuilding.php...

迅易科技 74cms SQL注入漏洞

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the id parameter of wap/wap-company-show.php...

Lvyecms has an arbitrary file read vulnerability

Lvyecms Brigade CMS is a php content management system based on ThinkPHP 3.2.x development. Lvyecms has an arbitrary file read vulnerability. An attacker can exploit the vulnerability to read server files...

EacooPHP has a file upload vulnerability

EacooPHP is a lightweight WEB product development framework based on ThinkPHP 5.0.21. EacooPHP suffers from a file upload vulnerability. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Metarget - Framework Providing Automatic Constructions Of Vulnerable Infrastructures

1 Introduction Metarget = meta- + target, a framework providing automatic constructions of vulnerable infrastructures, used to deploy simple or complicated vulnerable cloud native targets swiftly and automatically. 1.1 Why Metarget? During security researches, we might find that the deployment of...

Command Execution Vulnerability in Wild Rain Novel cms (CNVD-2021-40730)

Wild Rain Fiction CMS provides a lightweight fiction website solution based on ThinkPHP 5.1 MySQL. Raining Novels cms has a command execution vulnerability that can be exploited by attackers to gain server privileges...