WordPress Plugin Supsystic Contact Form Has Multiple Vulnerabilities

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. WordPress plugin Supsystic Contact Form suffers from SQL injection and cross-site scripting...

EmpireCMS suffers from a code execution vulnerability (CNVD-2021-17381)

EmpireCMS Empire Content Management System is an open source content management system CMS. A code execution vulnerability exists in EmpireCMS 7.5, which can be exploited by an attacker to gain control of the server...

SQL Injection Vulnerability in iCMS Content Management System

iCMS is an efficient and simple content management system built with PHP and MySQL. An SQL injection vulnerability exists in the iCMS content management system, which can be exploited by attackers to obtain sensitive information from the database...

BlackCat CMS Cross-Site Scripting Vulnerability (CNVD-2021-14158)

BlackCat CMS is a PHP5, HTML5 content management system. A stored cross-site scripting vulnerability exists in BlackCat CMS 1.3.6. The vulnerability can be exploited to conduct a cross-site scripting attack via the Display Name field in backend/preferences/ajaxsave.php...

XSS Vulnerability in CatfishCMS 5.5.3

Catfish catfish CMS is open source free PHP content management system. Catfishcms V5.5.3 has an xss vulnerability that can be exploited by attackers to obtain user cookie information...

ZZZCMS zzzphp SQL注入漏洞

ZZZCMS zzzphp is a content management system CMS. A security vulnerability exists in ZZZCMS zzzphp version 1.7.1, which allows remote attackers to exploit the vulnerability to execute arbitrary code...

xiycms backend has arbitrary file read vulnerability

xiycms is an open source and free enterprise content management system. xiycms backend has an arbitrary file read vulnerability. An attacker can exploit the vulnerability to read the database configuration file...

Arbitrary Code Execution Vulnerability in Ocean Cms Backend

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. There is an arbitrary code execution vulnerability in the backend of SeaCMS, which can be exploited by attackers to gain control of the server...

FeehiCMS Code Issues Vulnerabilities

FeehiCMS is a Php based CMS website builder by Liufee Personal Developer. A code issue exists in FeehiCMS 2.1.0, which may lead to remote code execution. A malicious file may be uploaded when the administrator logs in and opens the "Administrator Image Upload" page...

SQL Injection Vulnerability in WDJA Web Content Management System

WDJA Web Content Management System is a set of existing modules can be expanded and cloned PHP open source CMS system , using UTF-8 encoding , to take the language/code/program two separate technical modes . WDJA Web Content Management System has a SQL injection vulnerability that can be exploite...

WordPress Plugin Autoptimize Authenticated Arbitrary File Upload Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. WordPress Plugin Autoptimize Authenticated suffers from an arbitrary file upload...

flatCore SQL Injection Vulnerability (CNVD-2021-03255)

flatCore is a lightweight content management system CMS based on PHP and SQLite. A SQL injection vulnerability exists in flatCore CMS prior to version 2.0.0 build 139. The vulnerability stems from the program accepting input from a malicious user without properly detecting the input, resulting in...

Command Execution Vulnerability in XYHCMS

XYHCMS is a completely open source CMS content management system. XYHCMS has a command execution vulnerability that can be exploited by an attacker to gain server control privileges...

penetration

This is a collection of exploit code and research for various vulnerabilities in web applications, specifically content management systems CMS. The code is written in various programming languages, including PHP, and is used to demonstrate how to exploit vulnerabilities in these systems. The...

flatCore CMS 跨站脚本漏洞

flatCore is a lightweight content management system CMS based on PHP and SQLite. A cross-site scripting vulnerability exists in flatCore CMS prior to version 2.0.0 build 139, which stems from the program accepting malicious client-side scripts and failing to properly detect them, which can be...

Wdja 跨站脚本漏洞

Wdja is a Php-based content management system from the Wdja team. A cross-site scripting vulnerability exists in WDJA CMS version 1.5, where the vulnerability tongji parameter does not do XSS filtering on user input, which can be exploited by an attacker to steal user credentials...

SeaCMS ad***_vi***_ma***.htm file has SQL injection vulnerability

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. SeaCMS advima.htm file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database...

Chongqing Fengshengjia E-commerce Co., Ltd. mall CMS exists overstepping the right loophole

The business scope of Chongqing Feng Shengjia E-commerce Co., Ltd. includes: Internet sales, advertising design and agency, software development, enterprise management, etc.. Chongqing Feng Shengjia E-commerce Co., Ltd. mall CMS has an overstepping vulnerability, which can be exploited by attacke...

Logic Flaw Vulnerability in ZZCMS2020

ZZCMS is a content management system. A logic flaw vulnerability exists in ZZCMS2020, which can be exploited by attackers to gain server privileges...

NukeViet SQL Injection Vulnerability

Vinades NukeViet is an open source content management system CMS from Vinades Vietnam.Vinades NukeViet is vulnerable to a SQL injection vulnerability that originates from a SQL INSERT statement containing raw header data e.g., Referer and User-Agent from HTTP requests. No detailed vulnerability...