HAIRUICMS v2.1.4 Database Backup Vulnerability in DataM.asp File

HAIRUICMS HAIRUICMS is developed by HAIRUICMS based on Microsoft ASP and general ACCESS/MSSQL database. A database backup vulnerability exists in the HAIRUICMS v2.1.4 DataM.asp file. The vulnerability is caused by not filtering both the database path to be backed up and the backup storage path,...

YUNUCMS v1.0.7 Code Execution Vulnerabilities in controller\Wap.php and controller\Url.php Pages

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A code execution vulnerability exists in the YUNUCMS controller\Wap.php and controller\Url.php pages. An attacker can exploit the...

Arbitrary File Editing Vulnerability in isite v2.1.2

ISite enterprise building system is for people who know a little website construction and HTML technology such as enterprise website builders and developed a set of open source free program specifically for enterprise building. ISite v2.1.2 in the existence of arbitrary file editing vulnerability...

Leizi technology station building cms v1.0 there are arbitrary file editing vulnerabilities

Leizi technology station cms is a set of website source program developed independently by Chongqing Leizi technology computer company. Leizi technology station cms v1.0 there are arbitrary file editing vulnerability. The vulnerability is due to the program to edit the file name and write the...

File upload vulnerability in kjcms frontend

kjcms is an internet and mobile internet based food ordering service reservation system. A file upload vulnerability exists in the kjcms frontend. The vulnerability is caused due to the upload file type and suffix can be controlled by the user, allowing an attacker to upload a webshell and gain...

Code Execution Vulnerability in MaxCMS Version 4.0

Movie System Max Program MaxCMS is an open source program that specializes in serving the construction of movie websites. MaxCMS 4.0 version of the existence of code execution vulnerabilities, the vulnerability stems from the website configuration parameters are modified without filtering the...

File Upload Vulnerability in Amoy AspCMS v6.5

Amote AspCMS is a content management system based on the ASP language. A file upload vulnerability exists in Taote AspCMS v6.5, which allows an attacker to directly upload asp Trojan horse files to obtain a webshell...

Arbitrary File Editing Vulnerability in SDCMS Version v3.3

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDCMS v3.3 version of the existence of arbitrary file editing vulnerability, the vulnerability stems from the file path to modify the file and the content of the file to be written into the file are not...

Code Execution Vulnerability in Netnifty CMS v7.3

Netnew CIMS is an intelligent program developed professionally for building personal and corporate websites. A code execution vulnerability exists in Netnifty CMS v7.3, which can be exploited to obtain a webshell due to insufficient filtering of the parameters of the database file to be backed up...

zzcms v1.5.3.0129 version exists arbitrary file editing vulnerability

ZZCMS is an enterprise website builder. zzzcms v1.5.3.0129 version of the existence of arbitrary file editing vulnerability. The vulnerability stems from the fact that the file name, file path and file content of the file to be modified are not filtered, leading to a vulnerability that can be...

zzzcms v1.5.3.0129 version exists arbitrary file renaming vulnerability

zzcms is a free website builder developed in asp language. zzzcms v1.5.3.0129 version of the existence of arbitrary file renaming vulnerability. The vulnerability stems from the fact that the file name and path of the file to be renamed are not filtered, which can be exploited by an attacker to...

Arbitrary File Renaming Vulnerability in KingCMS v6.1.1641_Sp2 Version

KingCMS is a set of easy to learn, simple to operate open source content management system CMS, support for PHP + sqLite3/MySQL and ASP + ACCESS/MSSQL, dedicated to the professional development of oriented programs and enterprise website construction system. KingCMS v6.1.1641Sp2 version of...

dayucms v1.527 File Upload Vulnerability

DayuCMS is a free, open source, flexible and simple CMS system. dayucms v1.527 in the file upload vulnerability , the attacker vulnerability by uploading a zip file containing a Trojan horse , the system will automatically decompress , so as to obtain the webshell...

File Inclusion Vulnerability in CmsTop Version v1.0.0.800

CmsTop Popular Edition mainly solves the needs of small and medium-sized local websites, information channels of industrial websites, as well as website publishing and management of online media, institutions, schools and enterprises. CmsTop version 1.0.0.800 has a local file inclusion...

Code Execution Vulnerability in DayinCMS Version 1.3

3D Printing Cloud Platform System DayinCMS A platform-level 3D printing platform system that allows for the rapid establishment of 3D printing service platforms. A code execution vulnerability exists in DayinCMS version 1.3, which can be exploited by an attacker to insert a sentence and obtain a...

Code Execution Vulnerability in QYKCMS Version 4.3.2

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS 4.3.2 version of the code execution vulnerability, the vulnerability stems from the modification of the configuration of the incoming parameters are not filtered, allowing attackers to exploit...

File upload vulnerability in QYKCMS version 4.3.2 (CNVD-2018-05664)

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS version 4.3.2 file upload vulnerability exists, the vulnerability stems from the content of the uploaded zip backup file is not filtered, the attacker can use the vulnerability to obtain webshe...

Arbitrary File Editing Vulnerability in Light CMS Version 1.7

Light CMS is an intelligent website building system built in PHP+MYSQL environment. Light CMS 1.7 version of the existence of arbitrary file editing vulnerability, the vulnerability stems from the file path to modify the file and to write the contents of the file are not filtered, the attacker ca...

File Upload Vulnerability in QYKCMS Version 4.3.2

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS 4.3.2 version of the file upload vulnerability, the vulnerability stems from the server side did not filter the file content, the attacker can bypass the client-side detection of the direct...

File Upload Vulnerability in QCMS Version 3.0.1

QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in QCMS version 3.0.1. An attacker can exploit the vulnerability to forge bypass the background login, upload webshell, and gain server privileges...