CVE-2024-48180: Unrestricted Upload of File with Dangerous Type

ClassCMS =4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code...

CVE-2024-48180

ClassCMS =4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code...

CVE-2017-20073 Hindu Matrimonial Script cms.php privileges management

A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclose...

CVE-2017-20073

The CVE-2017-20073 entry concerns Hindu Matrimonial Script, where an improper privilege management flaw exists in the /admin/cms.php functionality. Multiple sources describe that this vulnerability can be triggered remotely and that the exploitable behavior involves privilege mismanagement in an ...

CVE-2017-20073 Hindu Matrimonial Script cms.php privileges management

A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclose...

PT-2022-7946

Name of the Vulnerable Software and Affected Versions Hindu Matrimonial Script affected versions not specified Description A critical issue has been found in the software, affecting an unknown functionality of the file /admin/cms.php. This leads to improper privilege management. The attack can be...

CVE-2017-20073: Improper Privilege Management

A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclose...

CVE-2013-4879

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...

CVE-2013-4879

Vulnerability: CVE-2013-4879 affects BigTree CMS 4.0 RC2 and earlier, due to an SQL injection in the code path that processes input via PATH_INFO to index.php (affecting core/inc/bigtree/cms.php). The root cause is insufficient sanitization/validation of user-supplied data, enabling remote attack...

CVE-2013-4879: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...

PT-2013-5256

Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.0 RC2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the PATH INFO to index.php in the core/inc/bigtree/cms.php file. Recommendations For BigTr...

WebGin SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Powered by WebGin SQL Injection Vulnerability Google Dork: Powered by WebGin /- Or/ inurl:Powered by WebGin email protected Author: Hacker alajman software:Powered by WebGin Software: Link: http://www.webgin.it/ Version: Powered by WebG...

site2host (cms.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: site2host cms.php SQL Injection Vulnerability Date: 08-10-2012 Author: Mouh Marvel-Dz Facebook : http://www.facebook.com/mouh.marvel Category: webapps Google dork: intext:"designed by site2host.com" inurl:cms.php?catid= Tested o...

CVE-2008-2650: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sl parameter to index.php. NOTE: this can be leveraged for remote file execution by including adm.ph...

CVE-2007-0551: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pthfileconfig and 2 pthfileimage parameters...