File Upload Vulnerability in OFCMS V1.1.4 Backend

OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the background of OFCMS version V1.1.4, which can be exploited by an attacker to gain administrative privileges on the server...

ZZCMS version 2020 is vulnerable to system reinstallation.

ZZCMS is a content management system for Webmaster Merchants. A system reinstallation vulnerability exists in ZZCMS version 2020, which can be exploited by attackers to cause a denial of service...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-58517)

ZZCMS is a content management system for Webmaster Merchants. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

ZZCMS 2020 suffers from SQL injection vulnerability (CNVD-2020-58514)

ZZCMS is a content management system for Webmaster Merchants. ZZCMS 2020 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Hoosk Cross-Site Request Forgery Vulnerability (CNVD-2020-50116)

Hoosk is a lightweight, user-centered, CodeIgniter-built content management system CMS that can be used to easily create stylish, responsive websites. A cross-site request forgery vulnerability exists in Hoosk versions prior to 1.7.2. An attacker could exploit this vulnerability to delete account...

CVE-2020-23978

SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"...

File Deletion Vulnerability in daozicms V1.4

Daozicms Enterprise Building System is a cms enterprise building system developed by Thinkphp6.0.2+layui-v2.3.0+Mysql5.7. A file deletion vulnerability exists in daozicms V1.4, which can be exploited by attackers to cause a denial of service attack...

DBHcms Cross-Site Scripting Vulnerability (CNVD-2020-49085)

DBHcms is a small, free and open source content management system for personal and small business websites. A stored cross-site scripting vulnerability exists in DBHcms 1.2.0. The vulnerability stems from the non-existence of the htmlspecialchars function form 'Name' in dbhcmstypes.php. An attack...

DBHcms Cross-Site Request Forgery Vulnerability (CNVD-2020-49090)

DBHcms is a small, free and open source content management system for personal and small business websites. DBHcms 1.2.0 suffers from a cross-site request forgery vulnerability. An attacker can exploit this vulnerability to remove any menu via /index.php?dbhcmspid=-80&deletemenu=9...

UCMS has information leakage vulnerability

UCMS is a simple and efficient PHP open source website building system. UCMS suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in UCMS

UCMS is an open source content management system, which can be used to quickly develop a variety of enterprise stations, article stations and station systems. UCMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

The vulnerability of the WordPress website content management system lies in the lack of measures to eliminate script-related HTML tags on web pages, allowing attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to the failure to remove scipt-related HTML tags from web pages. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...

High-Severity TinyMCE Cross-Site Scripting Flaw Fixed

A high-severity flaw has been disclosed in TinyMCE, an open-source text editor used in the content management systems CMS of websites. The recently patched flaw could have been potentially exploited remotely by attackers to gain administrative privileges to websites. TinyMCE, developed by Tiny...

flatCore Code Issue Vulnerability

flatCore is a lightweight content management system CMS based on PHP and SQLite. A security vulnerability exists in flatCore versions prior to 1.5.7. An attacker can exploit the vulnerability to upload and execute .php files...

Destoon B2B Content Management System Backend File Inclusion Vulnerability

DESTOON® B2B Website Management System is an open source B2B e-commerce industry portal solution based on PHP+MySQL. A file inclusion vulnerability exists in the backend of the Destoon B2B content management system, which can be exploited by attackers to gain server administrative privileges...

Command Execution Vulnerability in Fish Leap Cms

Catfish CMS is a content management system CMS developed by Catfish CMS for enterprise applications. FishCenter CMS inherits the many advantages of Catfish CMS and develops the unique qualities of FishCenter CMS according to the application oriented to provide a guarantee for the enterprise to...

penetration

This repository contains a collection of 0-day exploits and vulnerabilities for various CMS platforms, including CreateLive CMS, BlueCMS, and DVBBS. The exploits are primarily SQL injection and file upload vulnerabilities. The CreateLive CMS exploits include: A SQL injection vulnerability in the...

Stored Cross-site Scripting Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.

PHPOK system is a content management system for website construction developed by Shenzhen 锟铻科技有限公司formerly known as PHPOK Studio. A stored cross-site scripting vulnerability exists in PHPOK. The vulnerability can be exploited to obtain sensitive information such as administrator cookies...

Code Execution Vulnerability in CLTPHP Content Management System

CLTPHP Content Management System is a PHP content management system for building websites efficiently. A code execution vulnerability exists in CLTPHP Content Management System, which can be exploited by attackers to gain server privileges...

File upload vulnerability in ucms content management system

UCMS is a simple open source content management system, which can be very easily used to quickly develop various enterprise stations, article stations and station systems. ucms content management system file upload vulnerability, attackers can use the vulnerability to obtain server administrative...