4395 matches found
WTCMS Cross-site Request Forgery Vulnerability (CNVD-2021-69267)
WTCMS is a content management system CMS based on ThinkPHP. index.php?g=admin in WTCMS...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69272)
WTCMS is a content management system CMS based on ThinkPHP. a cross-site scripting vulnerability exists in the link address field under the link module of the WTCMS backend. No details of the vulnerability are currently available...
WTCMS 跨站请求伪造漏洞
WTCMS is a content management system CMS based on ThinkPHP. index.php?g=admin in WTCMS...
WTCMS 跨站脚本漏洞
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the link fields under the menu management module of the WTCMS backend. No detailed vulnerability details are provided at this time...
Yzmcms 代码问题漏洞
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. a server-side request forgery vulnerability exists in the grabimage function in YzmCMS version 5.5. No detailed vulnerability details are provided...
WTCMS 跨站脚本漏洞
WTCMS is a content management system CMS based on ThinkPHP. a cross-site scripting vulnerability exists in the link address field under the link module of the WTCMS backend. No details of the vulnerability are currently available...
WTCMS 跨站脚本漏洞
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...
WordPress Social Warfare Remote Code Execution Vulnerability (CNVD-2021-77611)
WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. WordPress Social Warfare has a remote code execution vulnerability that can be exploited by...
Indexhibit improper access control vulnerability
Indexhibit is a web-based content management system. An improper access control vulnerability exists in the /config/config.php component of Indexhibit version 2.1.5. An attacker could exploit this vulnerability to view arbitrary files...
WordPress SP Project And Document Remote Code Execution Vulnerability
WordPress is a blogging platform developed based on the PHP language, which can be used to set up websites on servers supporting PHP and MySQL databases, and can also be used as a content management system CMS. WordPress SP Project And Document has a remote code execution vulnerability that can b...
WordPress Modern Events Calendar remote code execution vulnerability
WordPress is a blogging platform based on the PHP language, which can be used to set up websites on servers supporting PHP and MySQL databases, and can also be used as a content management system CMS. WordPress Modern Events Calendar has a remote code execution vulnerability that can be exploited...
Indexhibit Cross-Site Scripting Vulnerability (CNVD-2021-67909)
Indexhibit is a web-based content management system. A reflection-based cross-site scripting vulnerability exists in the /plugin/ajax.php component of Indexhibit version 2.1.5. An attacker could use this vulnerability to execute arbitrary web script or HTML...
S-CMS 跨站脚本漏洞
S-CMS is a PHP and MySQL based Content Management System CMS from China-based S-CMS. A security vulnerability exists in S-CMS, which stems from a cross-site scripting XSS vulnerability in v1.0 of S-CMS. The vulnerability can be exploited to execute arbitrary code via the component's admin tpl.php...
CVE-2020-22848
A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...
Electron Technologies FZC PopojiCMS Cross-Site Request Forgery Vulnerability
Electron Technologies FZC PopojiCMS is an open source content management system CMS based on the Popoji framework from Electron Technologies FZC. version 2.0.1 of Electron Technologies FZC PopojiCMS admin.php is vulnerable to cross-site request forgery. No detailed vulnerability details are...
Electron Technologies FZC PopojiCMS Cross-Site Scripting Vulnerability
Electron Technologies FZC PopojiCMS is an open source content management system CMS from Electron Technologies FZC based on the Popoji framework.A cross-site scripting vulnerability exists in Electron Technologies FZC PopojiCMS. No detailed vulnerability details are currently available...
Electron Technologies FZC PopojiCMS Path Traversal Vulnerability
Electron Technologies FZC PopojiCMS is an open source content management system CMS from Electron Technologies FZC based on the Popoji framework.A path traversal vulnerability exists in Electron Technologies FZC PopojiCMS. No detailed vulnerability details are available at this time...
Desdev DedeCMS 代码问题漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing , content management , content editing and content retrieval functions. A security vulnerability exists in th...
CVE-2021-39136
baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are...
CVE-2021-39136
baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are...