4395 matches found
Crafter CMS 安全漏洞
Crafter CMS is an open source content management system CMS for digital experience applications. A security vulnerability exists in Crafter CMS. An attacker could exploit the vulnerability to lock content items...
ftcms arbitrary file writing vulnerability
ftcms is a content management system from ftcms. ftcms version 2.1 and previous versions have an arbitrary file write vulnerability, which originates from the lack of valid file checksum in admin/controllers/tp.php and can be exploited by attackers to cause arbitrary file writes...
CVE-2022-30048
Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...
ftcms 安全漏洞
ftcms is a content management system from ftcms Inc. A security vulnerability exists in ftcms version 2.1 and earlier versions, which can be exploited by attackers to execute arbitrary code...
EmpireCMS SQL Injection Vulnerability
EmpireCMS Empire Content Management System is an open source content management system CMS. EmpireCMS version 7.5 is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in AdClass.php and can be exploited to execute illegal SQL commands to steal...
Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2022-72212)
Subrion CMS is a PHP-based content management system CMS from the Subrion team. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1 and earlier, which stems from a lack of data validation of user-supplied data and output in the "Contact Us" plugin of the "Topic List". data an...
CScms SQL注入漏洞
CScms is a content management system CMS developed based on CI framework. SQL injection vulnerability exists in CScms version 4.1, the vulnerability originates from logging into the backend, opening the song module, creating a new song, deleting it to the recycle bin, and emptying the recycle bin...
Jspxcms 代码问题漏洞
Blue Intelligence Technology Jspxcms is China's Blue Intelligence Technology Company's set of scalable enterprise-class open source Web content management system CMS. Jspxcms version 10.2.0 has a security vulnerability , the vulnerability stems from the /cmscp/ext/collect/fetchurl.do?url=found th...
wdja SQL注入漏洞
Wdja is a Php-based content management system from the WDJA team. v2.1 of WDJA is vulnerable to SQL injection, which stems from the impact of a SQL injection vulnerability in the front-end search function. An attacker can exploit the vulnerability for SQL injection...
Victor CMS SQL Injection Vulnerability (CNVD-2022-85093)
Victor CMS is an open source content management system by Victor Alagwu, a personal developer in Nigeria. v1.0 of Victor CMS is vulnerable to SQL injection, which originates from the username parameter in /includes/login.php, and can be exploited by attackers to inject queries in /CMSsite/ throug...
CVE-2022-28114
DSCMS v3.0 was discovered to contain an arbitrary file deletion vulnerability via /controller/Adv.php...
Grav Cross-Site Scripting Vulnerability
Grav is a scalable CMS content management system for personal blogs, small content publishing platforms, and single-page product displays. cross-site scripting vulnerabilities exist in versions prior to Grav 1.7.33, which stem from the application's lack of filtering and escaping of user data. An...
PT-2022-18822 · Unknown · Navigate Cms
Name of the Vulnerable Software and Affected Versions: Navigate CMS version 2.9.4 Description: A Server-Side Request Forgery SSRF in the feed parser class allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter...
CuppaCMS SQL Injection Vulnerability (CNVD-2022-63581)
CuppaCMS is a content management system CMS.A SQL injection vulnerability exists in CuppaCMS v1.0, which originates from the lack of validation of external input SQL statements in /administrator/alerts/alertLightbox.php. An attacker could use this vulnerability to execute illegal SQL commands to...
TYPO3 One is Enough Library SQL Injection Vulnerability
TYPO3 is a content management system framework CMS/CMF from the Swiss TYPO3 Association.TYPO3 One is Enough Library 4.1.5 and earlier versions are vulnerable to SQL injection, which stems from inadequate cleaning of user-supplied data. A remote attacker could use this vulnerability to send a...
Seacms 注入漏洞
SeaCMS is a free and open source web content management system written in PHP. The system is designed primarily to manage video-on-demand resources.A security vulnerability exists in Seacms v11.6, which stems from a remote code execution RCE vulnerability in the /admin/weixin.php component. No...
DhCms 路径遍历漏洞
DhCms Dinghua Cloud CMS is a content management system based on PHP and MySQL. A security vulnerability exists in DhCms version 20170919, which originated from an arbitrary folder deletion vulnerability found via /admin.php?r=admin/AdminBackup/del...
BloofoxCms 代码问题漏洞
BloofoxCms is alexlang24 BloofoxCms individual developers of a Php-based text content management system. BloofoxCms 0.5.2.1 version has a security vulnerability, the vulnerability stems from the existence of arbitrary file upload vulnerability via...
Victor CMS Remote Code Execution Vulnerability
Victor CMS is an open source content management system in Nigeria. v1.0 of Victor CMS is vulnerable to remote code execution, which can be exploited by attackers to cause arbitrary code execution...