Stored Cross-Site Scripting Vulnerability in Swordfish Forum Ca***.php File

Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS, Swordfish Forum program is a completely open source and free forum source code, it is a lightweight and fast php forum source code. Swordfish Forum Ca.php file has a stored cross-site scripting vulnerability...

SQL Injection Vulnerability in the ca***.php file of Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background ca.php file of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

File upload vulnerability in QCMS website management system ca***.php (CNVD-2019-13600)

QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in the QCMS web management system ca.php, which can be exploited by an attacker to gain control of the web server...

SQL Injection Vulnerability in Five Fingers CMS v4.1.0

Five fingers CMS is a high-performance open source content management system , support for LNAMP architecture . Five Fingers CMS v4.1.0 SQL injection vulnerability exists , the vulnerability stems from the failure to filter ca.php file in the groupname parameter , an attacker can use the...