4395 matches found
CVE-2021-41279
CVE-2021-41279 affects baserCMS; a path traversal vulnerability exists in the upload handling where users with upload privileges can upload crafted zip files to traverse host filesystem. Affected versions prior to the fix allow this, with impact described as path traversal on the host OS. Remedia...
CVE-2021-41279 Zip Slip Vulnerability in BaserCMS
BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...
PortlandLabs Concrete CMS Elevation of Privilege Vulnerability
PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. PortlandLabs Concrete CMS is vulnerable to an elevation of privilege vulnerability that could be exploited by an attacker to elevate privileges from editor to administrator...
Kirby 跨站脚本漏洞
Kirby is a file-based content management system CMS. Kirby suffers from a cross-site scripting vulnerability that stems from the product's failure to validate input data, which could be exploited by attackers to execute client-side code...
ED01-CMS arbitrary file upload vulnerability
ED01-CMS is a content management system. ED01-CMS 1.0 is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary commands...
ED01-CMS cross-site scripting vulnerability
ED01-CMS is a content management system. A cross-site scripting vulnerability exists in the sposts.php component of ED01-CMS 1.0, which can be exploited by attackers to execute arbitrary web scripts or HTML by inserting specially crafted loads into the Post title or Post content fields...
EyouCms SQL Injection Vulnerability
EyouCms is a free + open source enterprise content management system based on the TP5.0 framework as the core development, focusing on the needs of enterprise building users. A SQL injection vulnerability exists in index.php in EyouCms version 1.4.7. An attacker can exploit this vulnerability by...
CVE-2020-18263
PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...
Ed01-Cms 代码问题漏洞
ED01-CMS is a content management system. ED01-CMS 1.0 is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary commands...
baijiacms path traversal vulnerability
baijiacms is a content management system CMS for e-commerce. baijiacms is vulnerable to a path traversal vulnerability, which stems from a directory traversal vulnerability found in database.php, which allows an attacker to delete a folder on any server with the id parameter...
WordPress 跨站脚本漏洞
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Coming Soon, Under Construction...
Symphony Communication ServicesHp Symphony 代码问题漏洞
Symphony is a PHP MySQL-based, open source content management system CMS that uses XML and XSLT as its backbone. symphonylibtoolkitclass.xmlelement.php in Symphony version 2.7.10 is vulnerable to XXE. An attacker could exploit this vulnerability to cause an information disclosure or denial of...
Monstra Remote Code Execution Vulnerability (CNVD-2021-94964)
Monstra is a lightweight content management system CMS. /admin/index.php?id=themes in Monstra version 3.0.4...
Monstra CMS 代码问题漏洞
Monstra is a lightweight content management system CMS. /admin/index.php?id=themes in Monstra version 3.0.4...
Chi-Chen Technology Cct95 Chichen Tech Cms SQL Injection Vulnerability
Chi-Chen Technology Cct95 Chichen Tech Cms is a content management system of China's Chi-Chen Technology Chi-Chen Technology. A security vulnerability exists in Chichen Tech CMS, which stems from multiple SQL injection vulnerabilities found in the product list.php file via the id and cid...
Macrob7 Macs Framework Cms SQL Injection Vulnerability
Macrob7 Macs Framework Cms is an open source Cms framework from the personal developer Macdonald Terrence Robinson. version 1.14 of the Macrob7 Macs Framework Content Management System is vulnerable to SQL injection, which allows attackers to SQL injection can be performed via the "roleId"...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2021-81100)
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the activepath, keyword,...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2021-81098)
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...
CVE-2020-36498
Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting XSS vulnerability in the account reset function, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field...