7 matches found
CVE-2022-30813
elitecms 1.01 is vulnerable to SQL Injection via /admin/addpost.php...
CVE-2021-25203
Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CMSsite-master\admin\includes\adminaddpost.php...
CVE-2022-30813
elitecms 1.01 is vulnerable to SQL Injection via /admin/addpost.php...
CVE-2022-30813
elitecms 1.01 is vulnerable to SQL Injection via /admin/addpost.php...
elitecms SQL注入漏洞
Elitecms is a Web content management from elitecms India. elitecms version 1.01 has a SQL injection vulnerability that originates from the lack of validation of external input SQL statements on the /admin/addpost.php page, which can be exploited by attackers to execute illegal SQL commands to ste...
CVE-2021-25203
Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CMSsite-master\admin\includes\adminaddpost.php...
CVE-2018-7733
An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/addpost.html...