Plone server-side request forgery vulnerability (CNVD-2021-37196)

Plone is an open source content management system CMS built on the Zope application server. A server-side request forgery vulnerability exists in Plone 5.2.4 and earlier versions. An authenticated remote attacker can exploit this vulnerability to read a line in a file...

SQL Injection Vulnerability in Rainy Novel cms 1.3.2

Wild Rain Fiction cms hereinafter referred to as KYXSCMS is a content management system that provides a lightweight fiction website solution based on ThinkPHP 5.1 MySQL technology. A SQL injection vulnerability exists in Drizzle Novel cms 1.3.2, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Fish Leap CMS

FishLeap CMS is a content management system specifically geared towards enterprise applications. A SQL injection vulnerability exists in Fishy CMS, which can be exploited by attackers to obtain sensitive information from the database...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.

PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to obtain server privileges...

Extreme CMS suffers from a code execution vulnerability (CNVD-2021-39004)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a code execution vulnerability that can be exploited by attackers to execute arbitrary code...

Unspecified vulnerability in MediaWiki (CNVD-2021-37744)

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.2 and earlier versions, which stems from the fac...

Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting (XSS)

Exploit Title: Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting XSS Date: 13/05/2021 Exploit Author: Ayşenur KARAASLAN Vendor Homepage: https://podcastgenerator.net/demoV2/ Software Link: https://podcastgenerator.net/download and...

Podcast Generator 3.1 Cross Site Scripting

Exploit Title: Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting XSS Date: 13/05/2021 Exploit Author: Ayşenur KARAASLAN Vendor Homepage: https://podcastgenerator.net/demoV2/ Software Link: https://podcastgenerator.net/download and...

SQL Injection Vulnerability in DHCMS (CNVD-2021-37334)

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Podcast Generator 3.1 - (Long Description) Persistent Cross-Site Scripting Vulnerability

Exploit Title: Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting XSS Exploit Author: Ayşenur KARAASLAN Vendor Homepage: https://podcastgenerator.net/demoV2/ Software Link: https://podcastgenerator.net/download and...

SQL Injection Vulnerability in DHCMS (CNVD-2021-37332)

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Command Execution Vulnerability in DHCMS

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

SQL Injection Vulnerability in iCMS (CNVD-2021-37339)

iCMS is a content management system built with PHP and MySQL. iCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

File Upload Vulnerability in JTBC Web Content Management System (PHP) at Shanghai SevenWise Network Technology Co.

JTBC Web Content Management System PHP is a website system that can expand and clone existing modules. Ltd. JTBC Web Content Management System PHP has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Phpfusion Cross-Site Scripting Vulnerability

Phpfusion is a lightweight content management system from Phpfusion UK. PHPFusion 9.03.110 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject arbitrary web script or HTML...

NoneCms Cross-Site Scripting Vulnerability (CNVD-2021-34498)

NoneCms is a simple and compact open-source content management system that can be used to quickly build corporate sites, personal blogs, and support mobile. NoneCms 1.3.0 version of static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf cross-site scripting vulnerability. The...

Hurricane (Shenzhen) Software Co., Ltd. Hurricane CMS has SQL injection vulnerabilities

Hurricane CMS is a content management system developed using PHP mysql. Hurricane Shenzhen Software Co., Ltd. Hurricane CMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Hurricane (Shenzhen) Software Co., Ltd. Hurricane CMS suffers from SQL injection vulnerabilities (CNVD-2021-35569)

Hurricane CMS is a content management system developed using PHP mysql. Hurricane Shenzhen Software Co., Ltd. Hurricane CMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Command Execution Vulnerability in CmsEasy Backend

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. A command execution vulnerability exists in the CmsEasy backend. An attacker can exploit the vulnerability to gain server privileges...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-35559)

Extreme CMS is an open source and free CMS web content management system in PHP language. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...