Remote Code Execution (RCE)

dolibarr/dolibarr is vulnerable to remote code execution. Attackers are able to perform remote code execution because the application doesn't properly escape backticks in the website builder module...

CVE-2021-33816

The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shellexec are blocked but backticks are not blocked...

CVE-2021-33816

The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shellexec are blocked but backticks are not blocked...

CVE-2021-33816

The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shellexec are blocked but backticks are not blocked...

CVE-2021-33816

The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shellexec are blocked but backticks are not blocked...

UBUNTU-CVE-2021-33816

The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shellexec are blocked but backticks are not blocked...

CVE-2021-33816

The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shellexec are blocked but backticks are not blocked...

CVE-2021-33816

CVE-2021-33816 affects Dolibarr 13.0.2: the website builder module enables remote PHP code execution because the protection mechanism blocks system, exec, and shell_exec but does not block backticks. This is the underlying root cause described across multiple sources (no public remediation detail...

PT-2021-20331 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 13.0.2 Description: The website builder module in Dolibarr allows remote PHP code execution due to an incomplete protection mechanism. Specifically, while system, exec, and shell exec are blocked, backticks are not blocked,...

MetInfo is vulnerable to SQL injection (CNVD-2021-81488)

MetInfo is an open source, free CMS website builder for businesses.MetInfo is vulnerable to SQL injection. An attacker can use the vulnerability to obtain sensitive database information...

File Upload Vulnerability in Beijing Bolehoo Technology Co.

Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. A file upload vulnerability exists in the website building system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to gain contr...

SQL Injection Vulnerability in CLTPHP

CLTPHP is a website builder based on thinkphp. CLTPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Silicon Peak website builder system suffers from SQL injection vulnerability

Shaanxi Silicon Peak Network Technology Co., Ltd. is a high-end brand network company integrating "website design, software development, micro letter construction" and other informationization services. There is a SQL injection vulnerability in Silicon Peak's website builder system, which can be...

Information leakage vulnerability in PHPSCUP enterprise website building system

PHPSCUP is a lightweight enterprise building system. PHPSCUP enterprise website builder system has an information leakage vulnerability, which can be exploited by attackers to obtain sensitive information...

S-CMS enterprise website building system suffers from SQL injection vulnerability (CNVD-2021-41052)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website builder system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

Arbitrary File Deletion Vulnerability in CMS

Knowledge CMS is an open source website builder. Know CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file directory...

File Upload Vulnerability in Zhiwei CMS

Knowledge CMS is an open source website builder. A file upload vulnerability exists in Know CMS, which can be exploited by attackers to gain control of the server...

Microhome Software Technology (Hangzhou) Co., Ltd. website builder system suffers from an arbitrary file read vulnerability

Microsoft Technology Hangzhou Co., Ltd. is a professional ECM Collaboration Management Software and BPM Business Process Management Software R & D and solution provider. There is an arbitrary file reading vulnerability in the website building system of Microhome Software Technology Hangzhou Co. A...

XSS vulnerability in cyberbiz website builder system

Cyberbiz is to provide a one-stop new retail solution, from the official website rack station, intelligent POS system, to the intelligent warehouse, which can be strung together with multiple gold logistics and so on. There is an XSS vulnerability in the cyberbiz website builder system, which can...

SQL Injection Vulnerability in Website Building System of Lianchuang Internet (Beijing) Technology Co.

Ltd. is a provider of interactive web website building/marketing services. A SQL injection vulnerability exists in the website builder system of Lianchuang Internet Beijing Technology Co. The vulnerability can be exploited by an attacker to obtain sensitive information from the database...