PHPOK suffers from a command execution vulnerability (CNVD-2021-35553)

PHPOK is a website building content management system to achieve customized open source free website building cms system. PHPOK has a command execution vulnerability that can be exploited by attackers to execute commands...

Craft CMS Cross-Site Scripting Vulnerability (CNVD-2021-40321)

Craft CMS is a content management system for developers, designers and web professionals that provides flexibility, power and ease of use. A cross-site scripting vulnerability exists in Craft CMS versions prior to 3.6.13. No details of the vulnerability are provided at this time...

LivingLogic XIST4C Cross-Site Scripting Vulnerability (CNVD-2021-39967)

XIST4C is a content management system, shopping cart software and web application framework from LivingLogic. A cross-site scripting vulnerability exists in LivingLogic XIST4C versions prior to 0.107.8. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via...

LivingLogic XIST4C 跨站脚本漏洞

XIST4C is a content management system, shopping cart software and web application framework from LivingLogic. A cross-site scripting vulnerability exists in LivingLogic XIST4C versions prior to 0.107.8. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via...

Grav Code Injection Vulnerability

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a code injection vulnerability that can be exploited by an attacker to perform arbitrary code execution and elevate privileges on an...

Command Execution Vulnerability in PHP7CMS

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. PHP7CMS has a command execution vulnerability that can be exploited by attackers to gain server privileges...

Arbitrary File Deletion Vulnerability in SECMS

SECMS is an open source PHP content management system. SECMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete files and cause a system reinstallation...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35731)

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

UCMS has a vertical override vulnerability

UCMS is a simple open source content management system. UCMS suffers from a vertical override vulnerability that can be exploited by attackers to obtain sensitive information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32379)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Arbitrary File Read Vulnerability in LightCMS

LightCMS is a lightweight content management system CMS that can also be used as a general-purpose back-office management framework. An arbitrary file read vulnerability exists in LightCMS, which can be exploited by an attacker to read arbitrary files...

SQL Injection Vulnerability in iCMS

iCMS is a content management system built with PHP and MySQL. iCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2021-29434

Wagtail (a Django-based CMS) has a vulnerability in rich-text links where server-side checks do not enforce a valid protocol, allowing a malicious admin user to publish content containing javascript: URLs. Affected versions can be exploited via admin POST requests; an ordinary site visitor cannot...

File Upload Vulnerability in Super cms v2.39 (CNVD-2021-32173)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

File Upload Vulnerability in Super cms v2.39 (CNVD-2021-32175)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

Command execution vulnerability in kiteCMS backend

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development, applicable to individuals and enterprises to quickly build stations and development needs. kiteCMS backend command execution vulnerability , attackers can exploit t...

SQL Injection Vulnerability in CSZ CMS

CSZ CMS is an open source content management system. CSZ CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

EmpireCMS in Command Execution Vulnerability

EmpireCMS Empire Content Management System is an open source content management system CMS. EmpireCMS is vulnerable to a command execution vulnerability that can be exploited by attackers to gain control of the server...

Joomla! local file inclusion vulnerability (CNVD-2021-30597)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A local file inclusion vulnerability exists in Joomla! versions 3.0.0 through...

Grav 安全漏洞

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms, and one-page product displays. A security vulnerability exists in Grav admin plugin versions prior to 1.10.11, which can be exploited by attackers to execute arbitrary code...