Code Execution Vulnerability in Tianmu MVC Website Management System Home Edition

Tianmu MVC website management system is Pizhou Tianmu Network Technology Co., Ltd. developed a professional PHP + MYSQL products, the use of independent MVC framework, applicable to large and small and medium-sized enterprises of the open source MVC. Tianmu MVC website management system Home...

Command Execution Vulnerability in In***.php File of CloudYou CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A command execution vulnerability exists in the In.php file of the YUNUCMS enterprise website management system. An attacker can exploit...

CloudYou CMS enterprise website management system Lo***.php file exists arbitrary file deletion vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. There is an arbitrary file deletion vulnerability in the Lo.php file of the YUNUCMS enterprise website management system. An attacker ca...

XSS Vulnerability in ESPCMS-P8 Enterprise Building Management System

ESPCMS-P8 enterprise station management system is developed by PHP+MySQL, which supports enterprise news and product release, talent recruitment, download, independent form management, online message, online ordering, inquiry and membership and other related enterprise website functions. There is...

SQL Injection Vulnerability in My***.php File of YunYu CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the My.php file of YUNUCMS enterprise website management system. An attacker can exploit the...

SQL Injection Vulnerability in Ma***.php File of YunYu CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the Ma.php file of YUNUCMS enterprise website management system. An attacker can exploit the...

SemCms foreign trade website management system suffers from SQL injection vulnerability (CNVD-2018-21973)

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website management system SQL injection vulnerability , the vulnerability stem...

Arbitrary File Deletion Vulnerability in YunMok

YunMOK cloud module is a free website management system launched by Nanchong Tiger Cloud Network Technology Co., Ltd. can build a website without technology software system. Can help businesses and individuals to quickly build a website and reduce the costs associated with secondary development...

SQL Injection Vulnerability in LaySNS

LaySNS is a lightweight, ThinkPHP+Layui-based integrated website management system that integrates content management and community interaction. LaySNS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

ESPCMS Enterprise Website Management System V6.7.17.08.07 SQL Injection Vulnerability in fo***.php Page

ESPCMS enterprise website management system is based on LAMP development and construction of enterprise website management system. ESSENCE ESPCMS Enterprise Website Management System V6.7.17.08.07 SQL injection vulnerability exists in fo.php page. An attacker can exploit the vulnerability to obta...

Stored Cross-Site Scripting Vulnerability in the Backend of Vanco Web Management System

Guangzhou Vanke Internet Technology Co., Ltd Vanke for short is an innovative enterprise that specializes in providing Internet marketing services for small and medium-sized enterprises SMEs. A stored cross-site scripting vulnerability exists in the backend of the Vantech website management syste...

October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting

October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting Exploit Title: October CMS User Plugin v1.4.5 - Persistent Cross-Site Scripting Date: 2018-04-03 Author: 0xB9 Software Link: https://octobercms.com/plugin/rainlab-user Version: 1.4.5 Tested on: Ubuntu 17.10 CVE: CVE-2018-10366 1...

Code Execution Vulnerability in YidaCMS Web Management System JS1.8.0 Version

YidaCMS website management system is a simple, practical and efficient website builder. A code execution vulnerability exists in version JS1.8.0 of the YidaCMS website management system, which allows an attacker to obtain a website webshell by editing any parsable script file within the website a...

Critical Flaw Reported In phpMyAdmin Lets Attackers Damage Databases

A critical security vulnerability has been reported in phpMyAdmin—one of the most popular applications for managing the MySQL database—which could allow remote attackers to perform dangerous database operations just by tricking administrators into clicking a link. Discovered by an Indian security...

Century Wind enterprise website management system has background authentication bypass vulnerability

Century Wind enterprise website management system is written using ASP ACCESS development language for small and medium-sized website management system. Century Wind enterprise website management system has a background authentication bypass vulnerability, due to the failure to accurately verify...

ZYCHCMS V06 Build170526 has a file inclusion vulnerability

ZYCHCMS is an enterprise website management system. A file inclusion vulnerability exists in ZYCHCMS V06. An attacker can exploit this vulnerability to upload script files...

Oriental Resources Self-service Website - SQL Injection Vulnerability in Enterprise Website Management System

Enterprise Website Management System is an enterprise website based on PHP+MYSQL. An SQL injection vulnerability exists in Oriental Resources Self-service Website Builder - Enterprise Website Management System. The vulnerability is due to the system pkey parameter does not filter the data submitt...

SQL Injection Vulnerability in SDMCS V1.1 Frontend

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDMCS V1.1 SQL injection vulnerability exists in the front-end, due to the system does not effectively filter the data submitted by the user, the attacker can exploit the vulnerability to obtain sensitiv...

SQL Injection Vulnerability in admin_book.php Backend of BEESCMS Enterprise Website Management Department

BEESCMS is an enterprise website management system. A SQL injection vulnerability exists in the adminbook.php backend of the BEESCMS enterprise website management system. An attacker can exploit this vulnerability to obtain database information...

Reflective Cross-site Scripting Vulnerability in Empire Web Management System

Empire Website Management System is a content management system based on php+mysql. A cross-site scripting vulnerability exists in the Empire Website Management System due to the system failing to perform strict filtering of strings. An attacker can exploit this vulnerability to perform cross-sit...