Code execution vulnerability in XYHCMS backend Fr***.cl***.php file

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system. A code execution vulnerability exists in the XYHCMS backend Fr.cl.php file. Attackers can use this vulnerability to obtain server privileges...

Arbitrary File Deletion Vulnerability in Fi***.cl***.php File in Dream CMS Backend

Dream CMS lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design model. Dream CMS background Fi.cl.php file exists arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files on the server...

SQL Injection Vulnerability in Bo***.cl***.php File in Dream CMS Backend

Dream CMS lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design model. A SQL injection vulnerability exists in the Bo.cl.php file in the background of Dream CMS. Attackers can use the vulnerability to obtain database sensitive information...

TuziCMS v3.0 Ma*** Ad***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ma Ad.cl.php suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in the sh***.cl***.php file of UQCMS cloud business system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system sh.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

SQL injection vulnerability in the go***.cl***.php file of UQCMS cloud business system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system go.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

SQL injection vulnerability in cl***.php page of website building system of Hubei Guosheng Technology Co.

Ltd. is a full-network value marketing service provider, to provide customers with comprehensive digital innovation services, to help traditional enterprises to realize the "Internet +" transformation and upgrading. There is a SQL injection vulnerability in the cl.php page of the website building...

OneThink Pu***.cl***.php file suffers from a universal password bypass vulnerability

OneThink is an open source content management framework. A universal password bypass vulnerability exists in the OneThink Pu.cl.php file. An attacker can exploit the vulnerability to obtain data-sensitive information...

Arbitrary file upload vulnerability in the al***.cl***.php page of the frontend of UQCMS cloud business system

UQCMS cloud business system is the program using PHP + MYSQL template using smarty template, front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system front al.cl.php page exists arbitrary file upload vulnerability. An attacker can exploit the vulnerability to...

SQL Injection Vulnerability in UQCMS Cloud Business System ca***.cl***.php Page

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. UQCMS cloud business system ca.cl.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

File upload vulnerability in the pr***.cl***.php file of the Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. A file upload vulnerability exists in the pr.cl.php file of Laikai E-commerce System. Attackers can use this vulnerability to obtain server privileges...

SQL injection vulnerability in the en***.cl***.php file of Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system en.cl.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in EmpireCMS cl***.php File

EmpireCMS is a content management system CMS. An SQL injection vulnerability exists in the EmpireCMS cl.php file, which can be exploited by attackers to obtain sensitive information...

Arbitrary file download vulnerability in the ba***.cl***.php file of the Seven Little Bears repository system

Seven bears library system a similar Baidu library online document preview, selling system. A vulnerability exists in the ba.cl.php file of the Seven Little Bears library system, which can be exploited by an attacker to obtain sensitive information. An attacker can exploit the vulnerability to...

SQL injection vulnerability in the co***.cl***.php file of the Seven Bears library system

Seven bears library system a similar Baidu library online document preview, selling system. A SQL injection vulnerability exists in the co.cl.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Stored Cross-site Scripting Vulnerability in the Us***.cl***.php File in the Frontend of the Feifei Movie and TV Navigation System

FeiFei Film and TV Navigation System FeiFeiCms is a free and open source PHP movie program. A stored cross-site scripting vulnerability exists in the Us.cl.php file in the frontend of FeiFeiCms. Attackers can insert malicious js code in the page to obtain user cookies and other information,...

LmxCMS V1.4 SQL Injection Vulnerability in Frontend Se***.cl***.php

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A SQL injection vulnerability exists in LmxCMS V1.4 frontend Se.cl.php. An attacker can exploit the vulnerability to obtain sensitive database information...

Code Execution Vulnerability in LmxCMS V1.4 Backend Te***.cl***.php

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A code execution vulnerability exists in Te.cl.php in the backend of LmxCMS V1.4. An attacker can exploit this vulnerability to launch a remote command...

SQL injection vulnerability in cl***.php file in ZZCMS 8.3 version

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the cl.php file in ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive database information...