NiuShop open source mall system v1.21 file upload vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system v1.21 file upload vulnerability exists. The vulnerability is due to the...

Hangzhou Allview Software Co., Ltd. college security integrated platform upLoadAttachment.php page has file upload vulnerability

Hangzhou Allview Software Co., Ltd. is a multinational company specializing in fire safety management. A file upload vulnerability exists in the upLoadAttachment.php page of the university security integrated platform of Hangzhou Allview Software Co. It allows attackers to exploit the vulnerabili...

Command Execution Vulnerability in SOC8000 IP-PBX of Shenou Communication Equipment Co.

SOC8000 IP-PBX is a new generation of carrier-grade unified communication system. Command execution vulnerability exists in SOC8000 IP-PBX of Shenou Communication Equipment Co. It allows the attacker to construct specific code to remotely execute commands, write webshell, and obtain server...

Remote command execution vulnerability in NetMizer log management system qq.php file

The NetMizer log management system is a stand-alone log management and analysis tool. A remote command execution vulnerability exists in the NetMizer Log Management System qq.php file, allowing an attacker to upload a webshell and gain server privileges...

Multiple Vulnerabilities in Yunyou CMS Enterprise Website Management System

Yunyou CMS enterprise website management system is a professional marketing enterprise building system based on PHP + MYSQL as the core development. A file upload and reflective cross-site scripting vulnerability exists in the CloudUnion CMS enterprise website management system. The vulnerability...

File Inclusion Vulnerability in Ocean CMS V6.57 cache.inc.php file

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. A file inclusion vulnerability exists in the ocean CMS V6.57 cache.inc.php file. The vulnerability is due to the background modification of the configuration file at the user input is not filtered, the...

File Upload Vulnerability in YUNUCMS 1.0.2

YUNUCMS is a three-network, open source content management system with its own substation system. YUNUCMS 1.0.2 version of the background file upload vulnerability exists, the vulnerability is due to the background upload failed to effectively filter the upload suffix. Attackers can use this...

Codiad File Upload Vulnerability

Codiad is a set of Web-based IDE framework , it contains a project / file manager and code editor , mainly used for online writing and editing code . A file upload vulnerability exists in Codiad. An attacker can exploit this vulnerability to upload a webshell during installation...

Command Execution Vulnerability in SessionCom Conference Call System

The conference call system is integrated with EasyMeeting Web to realize the integration of teleconferencing and web conferencing, and will be integrated with Microsoft, IBM and other industry mainstream office application software, so that the enterprise's meeting and office processes more...

CVE-2017-1000125

Codiadfull version is vulnerable to write anything to configure file in the installation resulting upload a webshell...

Design/Logic Flaw

Codiadfull version is vulnerable to write anything to configure file in the installation resulting upload a webshell...

CVE-2017-1000125

Codiadfull version is vulnerable to write anything to configure file in the installation resulting upload a webshell...

CVE-2017-1000125

Codiadfull version is vulnerable to write anything to configure file in the installation resulting upload a webshell...

CVE-2017-1000125

CVE-2017-1000125 affects Codiad. The vulnerability arises because full-version Codiad allows writing arbitrary data to its installation configuration file, enabling an attacker to upload a webshell. The issue is described consistently across sources as a file upload/configuration write flaw leadi...

TPshop open source mall system 2.0 eval-stdin.php file there is a backdoor default vulnerability

TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . TPshop open source mall system 2.0 eval-stdin.php file has a backdoor vulnerability . Attackers send POST requests containing malicious...

PowerShell Penetration Testing Framework: Nishang

Nishang is an open source framework and collection of powerful PowerShell scripts and payloads that you can use during penetration testing audit, post exploitation phase or other stages of offensive security auditing. Nishang is useful during various phases of a security auditing process and has...

Code execution vulnerability in SDCMS v1.2 themecontroller.php

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDCMS v1.2 version themecontroller.php code execution vulnerability, the attacker by writing Webshell to obtain server privileges...

Command Execution Vulnerability in MetInfo Version 5.3.19

MetInfo is a Content Management System CMS developed using PHP and Mysql. A command execution vulnerability exists in MetInfo version 5.3.19 patch bypass. After logging in to the system, an attacker can upload a file through the address bar icon, corresponding to change the name of the image file...

File Upload Vulnerability in V5.4 Backstage upload_bm1.asp Page of NetShow Shopping System

Net show shopping system is a shopping site developed with asp + access. A file upload vulnerability exists in the background uploadbm1.asp page of NetShow Shopping System V5.4. It allows an attacker to upload a webshell and gain server privileges...

Apache Tomcat Upload Bypass / Remote Code Execution(CVE-2017-12617)

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...