SQL Injection Vulnerability in zzphp 1.8.0 Backend

zzphp is a content management system. A SQL injection vulnerability exists in the zzzzphp 1.8.0 backend. An attacker can exploit this vulnerability to obtain sensitive information from the database...

XSS vulnerability in 115cms frontend (CNVD-2021-28389)

115CMS is developed using the current most popular ThinkPHP framework, which is an efficient and open source content management system. 115cms frontend has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

115CMS suffers from XSS vulnerability

115CMS is developed with ThinkPHP framework, which is an open source content management system. 115CMS suffers from an XSS vulnerability. An attacker can exploit the vulnerability to obtain an administrator cookie...

TYPO3 安全漏洞

TYPO3 is a free and open source content management system. TYPO3 has a denial of service vulnerability that can be exploited by an attacker to conduct a denial of service attack on a page by requesting illegal or non-existent resources...

Grav Path Traversal Vulnerability

Grav is a flat file CMS that uses Markdown files for content management. A path traversal vulnerability exists in the backup feature of Grav 1.7.0-rc.17 and earlier versions. An attacker can exploit this vulnerability to read arbitrary local files on the underlying server...

Grav 路径遍历漏洞

Grav is a flat file CMS that uses Markdown files for content management. An arbitrary file deletion vulnerability exists in the BackupDelete feature of Grav 1.7.0-rc.17 and earlier versions. An attacker can exploit this vulnerability by using path traversal techniques to delete arbitrary files on...

CSZ CMS Cross-Site Scripting Vulnerability (CNVD-2021-19691)

CSZ CMS is an open source content management system. A cross-site scripting vulnerability exists in several pages of CSZ CMS 1.2.9. The vulnerability can be exploited to conduct cross-site scripting attacks via field names...

Batflat Cross-Site Scripting Vulnerability

Batflat is a simple, lightweight content management system CMS. A cross-site scripting vulnerability exists in "Navigation" in Batflat 1.3.6, which can be exploited by remote attackers to inject arbitrary web script or HTML via a field name...

Batflat cross-site scripting vulnerability (CNVD-2021-17743)

Batflat is a simple, lightweight content management system CMS. A cross-site scripting vulnerability exists in Snippets in Batflat 1.3.6, which can be exploited by a remote attacker to inject arbitrary web script or HTML via a field name...

Batflat Cross-Site Scripting Vulnerability (CNVD-2021-18015)

Batflat is a simple, lightweight content management system CMS. A cross-site scripting vulnerability exists in Galleries in Batflat 1.3.6. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via field names...

The vulnerabilities of the “/submit.php” and “/infusions/downloads/downloads.php” components of the PHP-Fusion CMS system allow attackers to execute arbitrary SQL queries.

The vulnerability of the “/submit.php” and “/infusions/downloads/downloads.php” components of the PHP-Fusion CMS system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

CSZ CMS 跨站脚本漏洞

CSZ CMS is an open source content management system. A cross-site scripting vulnerability exists in several pages of CSZ CMS 1.2.9. The vulnerability can be exploited to conduct cross-site scripting attacks via field names...

CSZ CMS Cross-Site Scripting Vulnerability

CSZ CMS is an open source content management system. A stored cross-site scripting vulnerability exists in /admin/pages/new in CSZ CMS 1.2.9. An attacker can exploit this vulnerability via the content parameter to conduct a cross-site scripting attack...

There is an unspecified vulnerability in Joomla

Joomla is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source, cross-platform content management system CMS. Joomla suffers from a security vulnerability that stems from insufficient length for the use of 2FA secret sharing. No details of the vulnerability ar...

File upload vulnerability exists in UCMS (CNVD-2021-21601)

UCMS is a content management system written in PHP. There is a file upload vulnerability in the UCMS backend, which can be exploited by an attacker to upload arbitrary scripts to obtain a website webshell...

Logic Flaw Vulnerability in YZMCMS Content Management System

YZMCMS content management system is an all-in-one website building system. A logic flaw vulnerability exists in the YZMCMS Content Management System, which can be exploited by an attacker to modify a user's password...

Incorrect ACL Check Vulnerability in Joomla!

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An incorrect ACL checking vulnerability exists in Joomla! 3.0.0 - 3.9.24. An...

B2evolution Cross-Site Scripting Vulnerability (CNVD-2021-100271)

B2evolution is a PHP and MySQL-based community content management system. B2evolution cross-site scripting vulnerability can be exploited by attackers to execute malicious JavaScript code via the plugin name input field in the plugin module...

e107 跨站请求伪造漏洞

e107 is an open source, free and PHP and MySQL based Content Management System CMS from the E107 team. The system supports a variety of plug-ins and appearance themes, and can be used as a personal blog, discussion community, archive repository and so on. A cross-site request forgery vulnerabilit...

Directus Information Disclosure Vulnerability

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. An information disclosure vulnerability exists in Directus version 8.x prior to version 8.8.1, which can be exploited by an attacker to view all users in the CMS using API user id...