832 matches found
TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-21531)
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in TP-COUPON
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
Command Execution Vulnerability in Wild Rain Novel Cms
Wild Rain Fiction CMS provides a lightweight fiction website solution based on ThinkPHP 5.1 MySQL. Raining Novels cms has a command execution vulnerability that can be exploited by attackers to gain server privileges...
Arbitrary File Read Vulnerability in SIYUCMS
SIYUCMS is a content management system based on ThinkPHP + AdminLTE. SIYUCMS suffers from an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary files...
Arbitrary File Deletion Vulnerability in RGCMS Backend
RGCMS is an open source building management system, written in PHP with a Thinkphp 5.1 framework. RGCMS backend exists arbitrary file deletion vulnerability. An attacker can use the vulnerability to delete sensitive files in the website...
fastadmin 跨站脚本漏洞
fastadmin is a web backend development framework based on ThinkPHP and Bootstrap. A cross-site scripting vulnerability exists in fastadmin V1.0.0.20200506beta, which stems from the lack of proper validation of client-side data in WEB applications. An attacker can obtain administrator credentials ...
CVE-2020-35339
In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...
Command Execution Vulnerability in Tplay Backend
Tplay is a backend management framework based on ThinkPHP 5.0.13 + layui2.2.45 + Mysql development, PHP version required to upgrade to 5.5. A command execution vulnerability exists in Tplay backend. An attacker can exploit this vulnerability to gain server privileges...
XSS Vulnerability in ShuipFCMS
ShuipFCMS is a content management system based on ThinkPHP framework as the core and developed in an independent grouping approach. ShuipFCMS suffers from an XSS vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...
Command execution vulnerability in the backend of the Guojiz international web site navigation system (CNVD-2021-12803)
Guojiz International Website Navigation System is developed with ThinkPHP5.0 PHP7.0 Mysql Apache/Nginx/iis, a CMS program suitable for small and medium-sized webmasters to build websites. Guojiz international web site navigation system back-end command execution vulnerability, an attacker can use...
Command execution vulnerability in the backend of the Guojiz international web site navigation system (CNVD-2021-12804)
Guojiz International Website Navigation System is developed with ThinkPHP5.0 PHP7.0 Mysql Apache/Nginx/iis, a CMS program suitable for small and medium-sized webmasters to build websites. Guojiz international web site navigation system back-end command execution vulnerability, an attacker can...
NoneCMS ThinkPHP Framework Remote Code Execution
A remote code execution vulnerability exists in NoneCMS ThinkPHP Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ThinkAdmin Code Issues Vulnerabilities
ThinkAdmin is a general purpose backend management system based on the ThinkPHP framework. ThinkAdmin version 4 has a security vulnerability vulnerability , the vulnerability stems from insecure deserialization , an attacker can use the vulnerability to remotely execute arbitrary code...
Fastadmin Code Injection Vulnerability
fastadmin is a set of website backend development framework based on ThinkPHP and Bootstrap. Fastadmin V1.0.0.20200506 beta has a security vulnerability that can be exploited by attackers to cause server-side template injection SST vulnerability attacks...
ThinkAdmin Cross-Site Scripting Vulnerability
ThinkAdmin is a backend administration framework developed based on the latest ThinkPHP V6 , using the MIT protocol open source. thinkAdmin v1, v6 exists a stored cross-site scripting vulnerability. A remote attacker can use the vulnerability to inject arbitrary Web script or HTML...
Unauthorized Access Vulnerability in ThinkAdmin
ThinkAdmin is a backend management framework based on the latest ThinkPHP V6 development, using the loosest MIT protocol open source. ThinkAdmin has an unauthorized access vulnerability. Attackers can use the vulnerability to bypass login to directly read and modify sensitive information...
SQL Injection Vulnerability in the background of Wild Rain Novel CMS
Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. There is a SQL injection vulnerability in the background of KYXSCMS. Attackers can use the vulnerability to obtain sensitive information in the database...
Command Execution Vulnerability in the Backend of Wild Rain Novel CMS (CNVD-2020-68554)
Wild Rain Fiction Content Management System provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Rain Novel cms backend command execution vulnerability , attackers can use the vulnerability to obtain server privileges...
Command Execution Vulnerability in LzCMS Content Management System Backend
LzCMS is a simple blog system made by ThinkPHP+layui. A command execution vulnerability exists in the backend of LzCMS content management system. Attackers can use this vulnerability to upload Trojan horse files and obtain webshell...