Command execution vulnerability in songcms backend (CNVD-2021-12674)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...

Code Execution Vulnerability in the Backend of Ecommerce Power Mall System of Shenzhen Yitongding Multimedia Co.

The business scope of Shenzhen ETD Multimedia Co., Ltd. includes: website construction, mobile WeChat mini-program development, mini-program community group-buying system, VI design, network operation, cloud products-operation and maintenance solutions. There is a code execution vulnerability in...

Command Execution Vulnerability in Multiple LB-LINK Routers

BL-X22, BL-X16 and BL-X12 are all wireless routers from Shenzhen Bilian Electronics Co. A command execution vulnerability exists in multiple LB-LINK routers. An attacker can exploit this vulnerability to gain control of a web server...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03279)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A code execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control of t...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03278)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A command execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control o...

File Upload Vulnerability in Situ CMS

Situ CMS is the short name of Situ Tourism Website Management System, which is a self-developed website management system applicable to the construction of tourism websites. A file upload vulnerability exists in SITO CMS. An attacker can exploit this vulnerability to gain control of the web serve...

Design/Logic Flaw

An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server...

File Upload Vulnerability in FH Admin CMS of Shandong Aife Information Technology Co.

FH Admin is currently the mainstream java rapid development platform. Ltd. FH Admin CMS file upload vulnerability, an attacker can use the vulnerability to obtain control of the web server...

Multiple Vulnerabilities in JAVAPMS Portal Management System of Nanchang Zhengneng Information Technology Co.

JAVAPMS portal management system to SpringMVC + Spring + Hibernate + Freemarker + Html5 + jQuery for the technical core architecture , for individual webmasters , commercial enterprises , government agencies , educational institutions and other various units of the organization's information port...

File upload vulnerability in zblogphp 1.5.1

Z-Blog is an open source program based on Asp and PHP platforms. Z-Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

Command Execution Vulnerability in Ocean CMS Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the backend of Ocean CMS. An attacker can exploit this vulnerability to gain control of the web server...

Henan Qingfeng Network Technology Co., Ltd. Zhimei cloud website site system file upload vulnerability

Henan Qingfeng Network Technology Co., Ltd. is a high-tech company mainly operating in network services, engaged in website production, network marketing planning, software development, talent information services and other businesses. Henan Qingfeng Network Technology Co., Ltd. Zhimei cloud...

Apple CMS suffers from a command execution vulnerability (CNVD-2020-47330)

Apple CMS is a complete and powerful rapid site building system running on PHP+MYSQL environment. Apple CMS suffers from a command execution vulnerability that can be exploited by attackers to gain control of the web server...

Code execution vulnerability in Ocean CMS (CNVD-2020-47328)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A code execution vulnerability exists in Ocean CMS, which can be exploited by attackers to gain control of a web server...

Command Execution Vulnerability in EyouCms of Hainan Zanzan Network Technology Co. Ltd (CNVD-2020-47671)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. Hainan Zanzan Network Technology Co., Ltd. EyouCms there is a command execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

Suqian Xinchao Information Technology Limited Company PHP cloud talent system (phpyun) file upload vulnerability

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A file upload vulnerability exists in the PHP Cloud Talent System phpyun of Suqian Xinchao Information Technology Limited. An attacker can exploit th...

Command Execution Vulnerability in PHP Version of Nettie CMS of Fuzhou Nettie Software Technology Co.

Nettitanium CMS OTCMS PHP version based on PHP + sqlite/mysql technical architecture, UTF-8 coding, not only can be applied to a wide range of news/article publishing type of website, but also applicable to corporate websites. A command execution vulnerability exists in the PHP version of Fuzhou...

Palm Haidian App has file upload vulnerability

Palm Haidian APP is an official local news and information reading platform. There is a file upload vulnerability in Palm Haidian APP, which can be exploited by an attacker to gain control of the web server...

Command Execution Vulnerability in Ocean CMS Backend (CNVD-2020-33133)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the backend of Ocean CMS, which can be exploited by attackers to gain control of the web server...

File inclusion vulnerability in 115CMS backend In***.php file

115CMS is a content management system developed on ThinkPHP framework. A file inclusion vulnerability exists in the 115CMS backend In.php file. An attacker can exploit this vulnerability to upload arbitrary files and gain control of the web server...