Qibosoft Cross-Site Request Forgery Vulnerability (CNVD-2022-02758)

Qibosoft qibosoft is a content management system CMS from Qibosoft, a Chinese company. qibosoft is vulnerable to cross-site request forgery, which can be exploited by attackers to arbitrarily add administrator accounts...

Unauthorized Access Vulnerability in BossCMS

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. An unauthorized access vulnerability exists in BossCMS, which can be exploited by attackers to obtain sensitive information...

CVE-2020-21237

An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks...

CVE-2020-21238

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

Qibosoft qibosoft 跨站请求伪造漏洞

Qibosoft qibosoft is a content management system CMS from Qibosoft China. qibosoft suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to publish malicious articles...

CSCMS 安全漏洞

CScms is a content management system CMS developed based on the CI framework. cscms v4.0 is vulnerable due to a lack of effective protection against brute force attacks in the software user login box, which can be exploited by attackers to hijack user accounts via brute force attacks...

WordPress plugin Survey

WordPress is a blogging platform based on the PHP language that can be used to set up websites on servers that support PHP and MySQL databases, and can also be used as a content management system CMS.Survey...

Qibosoft 跨站请求伪造漏洞

Qibosoft qibosoft is a content management system CMS from Qibosoft, a Chinese company. qibosoft is vulnerable to cross-site request forgery, which can be exploited by attackers to arbitrarily add administrator accounts...

S-CMS cross-site scripting vulnerability in Zibo Shining Network Technology Co.

S-CMS is a PHP and MySQL-based content management system CMS from S-CMS China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to execute cross-site scripting attack XSS via /function/booksave.php...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2022-02733)

WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. version 4.1.0 of WUZHI CMS has a cross-site scripting vulnerability that can be exploited by attackers to steal cookies from administrators...

ThinkCMF Injection Vulnerability

ThinkCMF is a CMS Content Management System based on ThinkPHP. thinkCMF version X2.2.2 has a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted package...

S-CMS 跨站脚本漏洞

S-CMS is a PHP and MySQL based content management system CMS from Zibo Shining Network Technology Co., Ltd. in China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to perform cross-site scripting attacks XSS...

SEMCMS SQL Injection Vulnerability

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS suffers from an Access Control Error vulnerability, which stems from a vulnerability found in the checkuser function, which can be exploited by an attacker to obtain passwords in plaintext via a S...

phpKF CMS 3.00 Beta y6 - Remote Code Execution (Unauthenticated) Exploit

Exploit Title: phpKF CMS 3.00 Beta y6 - Remote Code Execution RCE Unauthenticated Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://www.phpkf.com/ Software Link: https://www.phpkf.com/indirme.php Version: 3.00 Category: Webapps Tested on: Linux/Windows phpKF-CMS; It is a very popula...

CuppaCMS Elevation of Privilege Vulnerability

CuppaCMS is a Content Management System CMS. An elevation of privilege vulnerability exists in CuppaCMS, which stems from a faulty programmatic call to a high-level native procedure. An authenticated attacker uses the usergroupidfield parameter to gain escalated privileges via a crafted POST...

Catfish CMS Cross-Site Scripting Vulnerability (CNVD-2021-103662)

Catfish CMS is an open source web content management system. a cross-site scripting vulnerability exists in Catfish CMS. No detailed vulnerability details are available at this time...

CVE-2021-43835

Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who have access to any subset of the admin UI are able to elevate their privilege. Over the API it was possible for them to give themselves permissions to areas which they did not...

CVE-2021-43835

CVE-2021-43835 concerns Sulu CMS (PHP, Symfony) where users with access to any admin UI subset can elevate privileges. The issue stems from the ProfileController putAction introduced in 2.0.0-RC1, enabling a user to grant themselves permissions to areas they should not access. Affected versions i...

CVE-2021-43835 Privilege escalation in the Sulu Admin panel

Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who have access to any subset of the admin UI are able to elevate their privilege. Over the API it was possible for them to give themselves permissions to areas which they did not...

SULU Sulu 安全漏洞

Sulu is an extensible, PHP-based open source content management system on the Symfony framework from the Austrian company Sulu SULU.Sulu suffers from a security vulnerability that could be exploited by an attacker to elevate its privileges and access content it would otherwise not have access to...