Command Execution Vulnerability in the Backend of Wild Rain Novel CMS (CNVD-2020-68554)

Wild Rain Fiction Content Management System provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Rain Novel cms backend command execution vulnerability , attackers can use the vulnerability to obtain server privileges...

Code Execution Vulnerability in UCMS

UCMS is a content management system written in PHP. A code execution vulnerability exists in UCMS, which can be exploited by an attacker to gain administrative privileges on the server...

UCMS suffers from a file upload vulnerability (CNVD-2020-69467)

UCMS is a content management system written in PHP. UCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Arbitrary File Deletion Vulnerability in Extreme CMS Backend

Extreme CMS is an open source and free PHPCMS web content management system. An arbitrary file deletion vulnerability exists in the backend of Extreme CMS, which can be exploited by attackers to compromise the integrity of the system...

UCMS suffers from a file upload vulnerability (CNVD-2020-68694)

UCMS is a simple open source content management system, it can be very convenient to quickly develop various kinds of enterprise station, article station and station system. UCMS has a file upload vulnerability , the attacker can obtain server privileges...

File Upload Vulnerability in LzCMS Content Management System Backend

LzCMS is a blog system developed by ThinkPHP+layui. A file upload vulnerability exists in the background of LzCMS content management system, which can be exploited by attackers to gain control of the web server...

TYPO3 cross-site scripting vulnerability (CNVD-2021-26150)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Typo3 Association. TYPO3 suffers from a cross-site scripting vulnerability that originates from insufficient processing of user-supplied data in the system extension Fluid typo3 / cms-fluid when...

Gila CMS 代码问题漏洞

Gila CMS is an open source content management system CMS based on PHP and MySQL. A file upload vulnerability exists in Gila CMS 1.16.0. An attacker can exploit this vulnerability to upload a shell to the tmp directory, which can then be used to execute PHP files using .htaccess via the logging...

SQL Injection Vulnerability in Wild Rain Novel Cms

Wild Rain Fiction CMS is a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Raining Novels cms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

File Upload Vulnerability in XHCMS Backend

XHCMS is a version of a general-purpose cms system that supports full site static. There is a file upload vulnerability in the background of XHCMS, which can be exploited by attackers to obtain server control privileges...

SQL Injection Vulnerability in bycms Content Management System

Beyoncms bycms content management system is a content management system. The bycms content management system suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to gain server control privileges...

File Upload Vulnerability in easySite Content Management System

CSCL is a provider of artificial intelligence technology and informatization software and platforms. A file upload vulnerability exists in easySite Content Management System, which can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in MCms Backend of Jiangxi Minsoft Technology Co.

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms backend SQL injection vulnerability, attackers can use the...

Jiangxi Minsoft Technology Co., Ltd. MCms background exists arbitrary file deletion vulnerability

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms back-end arbitrary file deletion vulnerability, an attacker can us...

Five Fingers CMS suffers from SQL injection vulnerability (CNVD-2020-62401)

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive data...

Command Execution Vulnerability in PHPCMS of Coolmile (Beijing) Culture Media Co.

PHPCMS is a web content management system based on PHP and Mysql architecture. There is a command execution vulnerability in PHPCMS, which can be exploited by attackers to obtain sensitive information and execute arbitrary code...

Xi'an Ziyun Antelope Network Technology Co., Ltd.'s CLTPHP has Arbitrary File Download Vulnerability

cltphp is a content management system based on php technology. There is an arbitrary file download vulnerability in CLTPHP of Xi'an Purple Cloud Antelope Network Technology Limited Liability Company. An attacker can exploit the vulnerability to download arbitrary file downloads and obtain sensiti...

S-CMS e-commerce system backend has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. A SQL injection vulnerability exists in the backend of S-CMS e-commerce system. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Five Fingers CMS

Five Fingers CMS is an open source content management system. Five Fingers CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

UCMS Command Execution Vulnerability

UCMS is a content management system written in PHP. UCMS v1.4.8 version of the existence of command execution vulnerability, the vulnerability stems from the file written fopen function there are arbitrary command execution vulnerability, an attacker can take advantage of the vulnerability can be...