CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

CVE-2020-36007

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

Arbitrary file deletion

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

Sql injection

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

Cross site scripting

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

Arbitrary file deletion

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36007

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36007

CVE-2020-36007 concerns AppCMS 2.0.101 where a cross-site scripting (XSS) vulnerability exists in /admin/template/tpl_app.php. The issue allows an attacker to obtain sensitive information of other users. Reported metrics show CVSSv2 base score 4.3 ( MEDIUM ) and CVSSv3.1 base score 6.1 ( MEDIUM )...

CVE-2020-36007

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php is affected by an arbitrary file deletion vulnerability. Multiple sources (CVE-2020-36006; CNVD-2021-40856; CNNVD-202106-261; other CVE mirrors) describe a vulnerability in AppCMS 2.0.101 that allows an attacker to delete arbitrary files on the site. The connecte...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php contains an arbitrary file deletion vulnerability. The CVE-2020-36005 entry indicates an ability for an attacker to delete arbitrary files on the site. Connected documents confirm the same flaw across CNVD/CNNVD listings, but do not provide concrete exploit detail...

CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

CVE-2020-36004

AppCMS 2.0.101 is affected by a SQL injection in /admin/download_frame.php. The vulnerability, described in multiple sources (e.g., CNVD/CNNVD entries), allows an attacker to obtain sensitive information from the database. The Connected documents confirm the affected component and vulnerability c...