Stored Cross-Site Scripting Vulnerability in Extreme CMS

Extreme CMS is an open source and free PHPCMS web content management system. A stored cross-site scripting vulnerability exists in Extreme CMS. An attacker can exploit the vulnerability administrator cookie...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-33092)

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Ocean CMS Backend (CNVD-2020-33129)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. Ocean CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2018-19599

Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: this is a discontinued product...

Extreme CMS mo**.php suffers from SQL Injection Vulnerability

Extreme CMS is a website building system. Extreme CMS mo.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in MyfCMS Backend at Adding New Posts

Min Yifei Content Management System, abbreviated MyfCMS, is a PHP+Mysql content management system. A SQL injection vulnerability exists in the backend of MyfCMS at Add New Article. An attacker can exploit the vulnerability to obtain sensitive database information...

Code Execution Vulnerability in LmxCMS V1.4

Dream cms lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design mode. A code execution vulnerability exists in LmxCMS V1.4, which can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in Acme cms

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Acme CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in co***_ru***.php of Acme CMS Backend

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. There is a SQL injection vulnerability in the backend coru.php of Acme CMS, which can be exploited by attackers to obtain sensitive database...

File upload vulnerability in the vi***_ed***.php file of the backend management system of Acme CMS

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. There is a file upload vulnerability in the vied.php file in the background management system of Acme CMS. Attackers can use the vulnerability to upload webshe...

SQL Injection Vulnerability in JinkoSolar CMS

Jingxun CMS is a PHP+Mysql content management system developed by Taizhou Jingxun Information Technology Co. A SQL injection vulnerability exists in JUNISUN CMS, which can be exploited by attackers to obtain sensitive database information...

Bolt Arbitrary PHP Code Execution Vulnerability

Bolt is a simple CMS written in PHP. An arbitrary PHP code execution vulnerability exists in Controller/Async/FilesystemManager.php in filemanager in versions prior to Bolt 3.6.5. A remote attacker can execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension...

Ivan Cordoba Generic Content Management System SQL Injection Vulnerability

Ivan Cordoba Generic Content Management System CMS is a content management system CMS based on MySQL and PHP. A SQL injection vulnerability in the Administrator/index.php file in Ivan Cordoba Generic CMS 2018-04-28 and earlier versions can be exploited by remote attackers to bypass authentication...

File upload vulnerability in Weizen CMS mo***.php file

Weizen CMS is a free source code analysis and learning system. A file upload vulnerability exists in the Weizen CMS mo.php file. The vulnerability is due to the failure to restrict the file format when uploading a file, allowing an attacker to upload arbitrary files and gain server privileges...

Hangzhou Hansun technology hansunCMS information leakage vulnerability

HansunCMS Hansun Technology cms is a portal content management system developed by Hangzhou Hansun Technology Co. Hangzhou Hansun Technology HansunCMS information leakage vulnerability, the vulnerability is due to the program in the background to leave the publicity of the external links caused b...

October CMS Cross-Site Scripting Vulnerability (CNVD-2018-14215)

October CMS is an open source, self-hosted content management system CMS built on the Laravel PHP framework, developed by Canadian software developer Alexey Bobkov and Australian software developer Samuel Georges. The Media module is one of the media content management modules. A cross-site...

CVE-2018-13002

An XSS issue was discovered in Inhaltsprojekte in Weblication CMS Core & Grid v12.6.24. The vulnerability is located in the wFilemanager.php and index.php files of the /grid5/scripts/ modules. The injection point is located in the Project Title and the execution point occurs in the Inhaltsprojekt...

Cosmo Arbitrary PHP Code Execution Vulnerability

Cosmo is a set of CMS Content Management System built on AngularJS and PHP. A security vulnerability exists in Cosmo version 1.0.0Beta6. The vulnerability can be exploited to execute arbitrary PHP code via the Database Prefix field in the Database Info screen on the localhost/Cosmo/install.php li...

Catfish CMS Cross-Site Scripting Vulnerability

Catfish CMS is an open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in comments in Catfish CMS version 4.7.21. A remote attacker can exploit this vulnerability by sending the 'pinglun' parameter to cat/index/index/pinglun to inject arbitrary web...

Arbitrary File Deletion Vulnerability in Light CMS Version 1.7

Light CMS is an intelligent website building system built in PHP+MYSQL environment. Light CMS 1.7 version of the arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete any file within the site...