CVE-2021-44949

glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...

Pluck code issue vulnerability (CNVD-2021-100243)

Pluck is a content management system CMS developed using the PHP language. a code issue vulnerability exists in Pluck, which originates from the product's admin backend page that does not validate file content. An attacker could execute malicious commands through this vulnerability...

ZZCMS dl_sendmail.php SQL Injection Vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS is vulnerable to SQL injection, which stems from a missing validation of externally entered SQL statements in the id parameter of admin/dlsendmail.php. An attacker could use this vulnerability to execute illegal SQL...

ZZCMS Access Control Error Vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS suffers from an access control error vulnerability that stems from an incorrect access control vulnerability in zzcms via admin.php, which can be exploited by an attacker to directly access the administrator console afte...

Pluck 代码问题漏洞

Pluck is a content management system CMS developed using the PHP language. a code issue vulnerability exists in Pluck, which originates from the product's admin backend page that does not validate file content. An attacker could execute malicious commands through this vulnerability...

WBCE CMS SQL注入漏洞

WBCE CMS is an open source content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in wbce cms, which stems from the vulnerability of wbce cms to improper neutralization of special elements used in SQL commands...

b2evolution Code Execution Vulnerability

b2evolution is a community content management system based on PHP and MySQL. A security vulnerability exists in b2evolution CMS v7.2.3, which can be exploited by an attacker to execute arbitrary code via the parameter cfqueryparam in the user login section...

Kentico Cross-Site Scripting Vulnerability (CNVD-2022-06913)

Kentico is an ASP.NET-based content management system CMS from Kentico, Inc. A security vulnerability exists in Kentico Xperience CMS, which stems from the fact that Kentico Xperience CMS version 13.0 13.0.43 is prone to a persistent cross-site scripting XSS vulnerability also known as stored or...

The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures for cleaning incoming data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

TuziCMS has an unspecified vulnerability

TuziCMS rabbit CMS is a PHP and MySQL based content management system CMS for enterprises. a security vulnerability exists in TuziCMS version v2.0.6, which stems from the id parameter in AppManageControllerDownloadController.class.php. No detailed vulnerability details are available at this time...

TaoCMS SQL Injection Vulnerability (CNVD-2021-94813)

TaoCMS is a micro Cms Content Management System in China.TaoCMS is vulnerable to SQL injection and no details of the vulnerability are provided...

b2evolution 跨站请求伪造漏洞

b2evolution is a PHP and MySQL-based community content management system. b2evolution CMS v7.2.3 is vulnerable due to a cross-site request forgery CSRF contained in the user login page. An attacker could exploit this vulnerability to elevate privileges...

TaoCMS SQL Injection Vulnerability

TaoCMS is a micro Cms Content Management System in China.TaoCMS is vulnerable to SQL injection and no details of the vulnerability are provided...

TaoCMS Cross-Site Scripting Vulnerability

Taocms is a micro Cms Content Management System in China. taocms has a cross-site scripting vulnerability, no details of the vulnerability are provided at this time...

The vulnerability of the Adobe Experience Manager content and media management system, related to authentication errors, allows a perpetrator to access confidential information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

Taocms SQL注入漏洞

TaoCMS is a micro Cms Content Management System in China.TaoCMS is vulnerable to SQL injection and no details of the vulnerability are provided...

The vulnerability of the DNN CMS system, related to insufficiently secure data encryption, allows attackers to gain unauthorized access to protected information.

The vulnerability of the DNN CMS system is related to insufficiently secure data encryption. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

baserCMS OS Command Injection Vulnerability

baserCMS is an enterprise content management system CMS from the baserCMS Basercms team. baserCMS's management system is vulnerable to operating system command injection, which could be exploited by an attacker with upload file privileges to upload crafted zip files that could execute arbitrary...

CVE-2021-41279

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...

Path traversal

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...