CVE-2020-21005: Unrestricted Upload of File with Dangerous Type

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell...

WellCMS 代码问题漏洞

WellCMS is an open source with a billion load, tend to mobile, lightweight, with ultra-fast response ability of high load CMS, is a large amount of data, high concurrency access to the site's best choice of light CMS. has a safe, efficient, stable, ultra-fast speed, super load characteristics. A...

PT-2021-10572

Name of the Vulnerable Software and Affected Versions: WellCMS version 2.0 beta3 Description: The issue allows a user to upload a file by logging into the CMS background and modifying the upload file type, potentially leading to webshell access. Recommendations: For WellCMS version 2.0 beta3,...

File Upload Vulnerability in WellCMS v2.0 Backend

WellCMS is an open source, mobile-oriented lightweight CMS. A file upload vulnerability exists in the WellCMS v2.0 backend, which can be exploited by attackers to gain server privileges...

Logic Flaw Vulnerability in WellCMS X

WellCMS X is an open source, mobile-oriented lightweight CMS. A logic flaw exists in WellCMS X, which can be exploited by attackers to reset administrator and other user passwords...

WellCMS X has an xss vulnerability

WellCMS X is a mobile-oriented content management product. An xss vulnerability exists in WellCMS X, which can be exploited to inject arbitrary web script or HTML...