CSRF Vulnerability in Cicada CMS 6.2

Cicada Knowledge Enterprise Portal System is an open source and free enterprise portal system. CSRF vulnerability exists in Cicada Knowledge cms version 6.2. The vulnerability stems from the lack of token validation on the background page of Cicada Knowledge cms, which leads to the triggering of...

Cicada-known cms 6.2 CSRF vulnerability

No description provided by source...

Storage-based Cross-site Scripting Vulnerability in Cicada Knowledge Enterprise Portal System Version 6.1

Cicada Knowledge Enterprise Portal System is a web content management system. A stored cross-site scripting vulnerability exists in Cicada Knowledge Enterprise Portal System version 6.1 Commodity Purchase, Delivery Address. The vulnerability allows attackers to steal administrator COOKIE...

Override vulnerability in the remove parameter of Cicada Knowledge Enterprise Portal and Ranch Collaboration Management System.

Cicada Knowledge Enterprise Portal System is a website content management system, and Ranch Coworking Management System is an enterprise coworking system. An override vulnerability exists in the remove parameter of Cicada Knowledge Enterprise Portal System and Ranzhi Collaboration Management...

Arbitrary File Upload Vulnerability in Cicada Knowledge Enterprise Portal System and Ranzhi Collaboration Management System

Cicada Knowledge Enterprise Portal System is a website content management system, and Ranch Coworking Management System is an enterprise coworking system. An arbitrary file upload vulnerability exists in Cicada Knowledge Enterprise Portal and Ranzhi Collaboration Management System, which can be...

Cicada-known CMS v5. 6 user-deny-reflective XSS vulnerability

Vulnerability overview Cicada-known open source version of the CMS v5. 6 in the user module of the deny method to render the template file, for user input of parameters for rendering, and not handled correctly, can lead to bypassing some of the filter, thereby causing the reflective XSS the...

Cicada-known Enterprise Portal system v2. 5 reception getshell-a vulnerability warning-the black bar safety net

See module/file/control.php code area public function ajaxUpload$uid $file = $this-file-getUpload'imgFile'; $file = $file0; if$file if!$ this-file-checkSavePath $this-sendarray'error' = 1, 'message' = $this-lang-file-errorUnwritable; moveuploadedfile$file'tmpname', $this-file-develop this program...

Cicada-known Enterprise Portal system v2. 5 sql injection to admin-vulnerability warning-the black bar safety net

The problem is when the user modifies the information of the place /system/module/user/control.php public function edit$account = " if!$ account or RUNMODE == 'front' $account = $this-app-user-account; if$this-app-user-account == 'guest' $this-locateinlink'login'; if! empty$POST...

Cicada-known Enterprise Portal system v2. 5. 1 to bypass the patch to continue injection-vulnerability warning-the black bar safety net

/system/module/user/model.php public function update$account / If the user want to change his password. / if$this-post-password1 != false $this-checkPassword; ifdao::isError return false; $password = $this-createPassword$this-post-password1, $account; $this-post-set'password', $password; $user =...