CVE-2021-32737 XSS Injection in Media Collection Title was possible

Sulu is an open-source PHP content management system based on the Symfony framework. In versions of Sulu prior to 1.6.41, it is possible for a logged in admin user to add a script injection cross-site-scripting in the collection title. The problem is patched in version 1.6.41. As a workaround, on...

CVE-2021-32735

Kirby CMS vulnerability CVE-2021-32735 affects Kirby 3.5.5 and 3.5.6 where the Panel’s ListItem component displayed HTML in page titles (and related fields) as-is, enabling cross-site scripting (XSS). Exploitation could enable malicious authenticated Panel users to escalate privileges if they gai...

CVE-2021-32538

ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrary files without logging in, and further execute code unrestrictedly...

CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...

CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...

Catfish CMS suffers from a file upload vulnerability (CNVD-2021-49555)

Catfish CMS is a free and open source PHP content management system. Catfish CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Catfish CMS suffers from a file upload vulnerability (CNVD-2021-49557)

Catfish CMS is a free and open source PHP content management system. Catfish CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56484)

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms 2019 suffers from a SQL injection vulnerability. The vulnerability originates from user/ztconfig.php SQL injection via the dohang or img POST parameter. No detailed vulnerability details are currently available...

WebPort 路径遍历漏洞

WebPort is a remote access and preventive maintenance device. It enables access to control system data and equipment. A path traversal vulnerability exists in Webport CMS in version 1.19.10.17121, which stems from the product failing to properly filter for specific elements in the path of a...

PHPOK suffers from a file upload vulnerability (CNVD-2021-46925)

PHPOK is a website building content management system to achieve customized open source free website building cms system. PHPOK has a file upload vulnerability that can be exploited by attackers to gain control of the server...

5UCMS suffers from SQL injection vulnerability (CNVD-2021-46910)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a SQL injection vulnerability , attackers can use the...

Command Execution Vulnerability in 5UCMS

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a command execution vulnerability, attackers can use this...

GetSimple CMS Cross-Site Scripting Vulnerability

GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in GetSimple CMS 3.3.15 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the sitename, username, and ema...

5UCMS suffers from SQL injection vulnerability (CNVD-2021-46894)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a SQL injection vulnerability , attackers can use the...

5UCMS suffers from SQL injection vulnerability (CNVD-2021-46918)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a SQL injection vulnerability , attackers can use the...

SQL injection vulnerability exists in 5UCMS (CNVD-2021-46919)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a SQL injection vulnerability , attackers can use the...

phpwcms code injection vulnerability

phpwcms is an open source Web content management system. It is fast, easy to install and runs on any standard web server platform that supports PHP/MySQL. phpwcms suffers from a code injection vulnerability that can be exploited by attackers via /phpwcms/setup/setup.php...

slackero phpwcms 代码注入漏洞

phpwcms is an open source Web content management system. It is fast, easy to install and runs on any standard web server platform that supports PHP/MySQL. phpwcms suffers from a code injection vulnerability that can be exploited by attackers via /phpwcms/setup/setup.php...

The vulnerability of the CMS system Super CMS Blog Pro PHP Script, which arises due to insufficient validation of input data, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the CMS system Super CMS Blog Pro PHP Script exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2021-49143)

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo. The vulnerability can be exploited to conduct cross-site scripting attacks via the gourl parameter in login.php...