PowerDNS -- Insufficient validation in the HTTP remote backend

PowerDNS developers report: An issue has been found in PowerDNS Authoritative Server when the HTTP remote backend is used in RESTful mode without post=1 set, allowing a remote user to cause the HTTP backend to connect to an attacker-specified host instead of the configured one, via a crafted DNS...

SQL Injection Vulnerability in 74cms Backend Pe***.cl***.php File

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Pe.cl.php file SQL injection vulnerability. Attackers can use the...

BageCms v3.1.0 Code Execution Vulnerability at Backend Template Function

Bage Content Management System BageCms is a web content management system based on php+mysql. BageCms v3.1.0 code execution vulnerability exists at the background template function, allowing attackers to remotely execute commands and gain server privileges...

Command execution vulnerability in the messagingagent module of Xiaoxi MINI smart speaker

Xiao Ai MINI Smart Speaker is an AI-based speaker that can be connected to the Internet. A command execution vulnerability exists in the messagingagent module of the Xiao-ai MINI smart speaker, which can be exploited by an attacker to remotely execute arbitrary commands to the device from the...

OFCMS backend ueditor uploadScrawl file upload vulnerability

OFCMS is a content management system developed based on java technology. There is a file upload vulnerability in OFCMS backend ueditor uploadScrawl, which can be exploited by attackers to upload webshell and gain server privileges, posing information leakage and operational security risks...

OFCMS backend ueditor uploadImage file upload vulnerability

OFCMS is a content management system developed based on java technology. There is a file upload vulnerability in OFCMS backend ueditor uploadImage, which can be exploited by attackers to upload webshell and gain server privileges, posing information leakage and operational security risks...

Directory Traversal Vulnerability in OFCMS Backend

OFCMS is a content management system developed based on java technology. A directory traversal vulnerability exists in the backend of OFCMS, which can be exploited by an attacker to traverse the directory and obtain sensitive information...

Command Execution Vulnerability at OFCMS Backend Template Customization

OFCMS is a content management system developed based on java technology. A command execution vulnerability exists in the OFCMS backend template customization, which can be exploited by an attacker to execute arbitrary commands...

File Upload Vulnerability in OFCMS Backend

OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the background of OFCMS, which can be exploited by an attacker to upload arbitrary files...

OFCMS backend editUploadImage method has file upload vulnerability

OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the editUploadImage method in the background of OFCMS, which can be exploited by an attacker to upload a webshell and gain access to the server, posing an information leakage and...

OFCMS Backend SQL Injection Vulnerability

OFCMS is a content management system based on Java technology. A backend SQL injection vulnerability exists in versions of OFCMS prior to 1.1.3. An attacker can exploit the vulnerability to launch admin/system/generate/create?sql= SQL injection attack...

Code Execution Vulnerability in Polyglot CMS Backend

Polygraph cms is an open source content management system CMS. A code execution vulnerability exists in the back-end of JUCOR cms, which can be exploited by attackers to execute arbitrary code...

Page code execution vulnerability in MLECMS backend s***_uc***r.php

MLECMS is a multilingual, free and open source content management system. A page code execution vulnerability exists in the MLECMS backend sucr.php. An attacker can exploit the vulnerability to write a webshell to a user-accessible php page to gain server control privileges...

SQL Injection Vulnerability in Co.MZ Enterprise System v1.1.0 Backend

Co.MZ Enterprise System is a lightweight enterprise website management system. Co.MZ Enterprise System v1.1.0 suffers from a SQL injection vulnerability in the backend. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in iCMS Backend da***.admincp File

iCMS is a free, clean, efficient, and useful PHP content management system. There is a SQL injection vulnerability in the iCMS backend da.admincp file, which can be exploited by attackers to obtain sensitive database information...

File Upload Vulnerability in Super CMS Backend

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

DhCms Cross-Site Scripting Vulnerability

DhCms Dinghua Cloud CMS is a content management system based on PHP and MySQL. A cross-site scripting vulnerability exists in the admin.php?r=admin/Index/index backend in DhCms 2017-09-18 and earlier versions. A remote attacker can exploit this vulnerability to obtain cookie information...

Code execution vulnerability in WMCMS V4.250.513 backend

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS V4.250.513 code execution vulnerability exists in the background, an attacker can use the vulnerability to obtain control of the server...

Code execution vulnerability in baigo CMS v2.1.1 backend

baigo CMS is a PHP-based open source content management system. A code execution vulnerability exists in the backend of baigo CMS v2.1.1, which can be exploited by an attacker to gain control of the web server...

SQL Injection Vulnerability in Five Fingers CMS v4.1.0 Backend

Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture. Five Fingers CMS v4.1.0 SQL injection vulnerability exists in the background , an attacker can exploit the vulnerability to obtain sensitive information in the database...