CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php is affected by an arbitrary file deletion vulnerability. Multiple sources (CVE-2020-36006; CNVD-2021-40856; CNNVD-202106-261; other CVE mirrors) describe a vulnerability in AppCMS 2.0.101 that allows an attacker to delete arbitrary files on the site. The connecte...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php contains an arbitrary file deletion vulnerability. The CVE-2020-36005 entry indicates an ability for an attacker to delete arbitrary files on the site. Connected documents confirm the same flaw across CNVD/CNNVD listings, but do not provide concrete exploit detail...

CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36004

AppCMS 2.0.101 is affected by a SQL injection in /admin/download_frame.php. The vulnerability, described in multiple sources (e.g., CNVD/CNNVD entries), allows an attacker to obtain sensitive information from the database. The Connected documents confirm the affected component and vulnerability c...

CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

CVE-2020-36004

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

AppCMS security vulnerabilities

AppCMS is a content management system CMS for mobile application downloads. A security vulnerability exists in AppCMS version 2.0.101, which can be exploited by an attacker to delete arbitrary files on the site...

CVE-2020-36007: Improper Neutralization of Input During Web Page Generation

AppCMS 2.0.101 in /admin/template/tplapp.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users...

CVE-2020-36006: Undefined Security Weakness

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36005: Undefined Security Weakness

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

PT-2021-11903

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows an attacker to perform a cross-site scripting attack, potentially obtaining sensitive information of other users. This is related to the /admin/template/tpl app.php file. Recommendations: F...

AppCMS SQL Injection Vulnerability

APPCMS is a professional APP content management system, APP application part needs to be used in combination with data center. A SQL injection vulnerability exists in /admin/downloadframe.php in AppCMS version 2.0.101. An attacker can exploit this vulnerability to obtain sensitive information fro...

PT-2021-11902

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows attackers to delete arbitrary files on the site due to an arbitrary file deletion vulnerability in /admin/info.php. Recommendations: For AppCMS version 2.0.101, consider restricting access ...

AppCMS cross-site scripting vulnerability

AppCMS is a content management system CMS for mobile application downloads. A cross-site scripting vulnerability exists in AppCMS version 2.0.101, which can be exploited by an attacker to obtain sensitive information about other users...

PT-2021-11901

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows attackers to delete arbitrary files on the site due to an arbitrary file deletion vulnerability in /admin/app.php. Recommendations: For AppCMS version 2.0.101, as a temporary workaround,...

CVE-2020-36004: Improper Neutralization of Special Elements used in an SQL Command

AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...

PT-2021-11900

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows attackers to obtain sensitive database information through a SQL injection vulnerability in the /admin/download frame.php file. Recommendations: For AppCMS version 2.0.101, consider...