Code execution vulnerability exists in empire cms (CNVD-2020-48544)

Empire CMS is a content management system CMS. A code execution vulnerability exists in Empire cms, which can be exploited by an attacker to remotely execute malicious code...

File Upload Vulnerability in WCMS

WCMS is a CMS turned editorially oriented editor. WCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Arbitrary File Upload Vulnerability in Content Management System of Nanchang Boran Technology Co.

Nanchang Boran Technology Co., Ltd. is a professional company providing enterprise information construction application and promotion services. The content management system of Nanchang Boran Technology Co., Ltd. suffers from an arbitrary file upload vulnerability, which can be exploited by...

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Co.

DedeCMS for PHP Web Content Management System - Dream Content Management System, using XML namespace style core templates: templates are all saved using the file form, the user design templates, website upgrades transfer are provided to facilitate the transfer of template labels stationmasters ca...

Information leakage vulnerability in content management system of Nanchang Boran Technology Co.

Nanchang Boran Technology Co., Ltd. was founded in April 2009, for Nanchang various large and medium-sized enterprises to design and produce websites, business scope design website planning, web design, website construction, website optimization and search engine optimization and other services...

Arbitrary File Deletion Vulnerability in DM Website System

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM website builder system exists arbitrary file deletion vulnerability. Attackers can exploit the vulnerability to delete arbitrary files...

Code Execution Vulnerability in WMCMS of Chongqing Yu Yue Optoelectronics Technology Co.

WMCMS is a set of PHP + MYSQL based on the core development, free + open source professional Chinese labeling station-building system. WMCMS has a code execution vulnerability that can be exploited by an attacker to gain administrative privileges on the web server...

Hefei Tianxun Information Technology Co., Ltd. pushes the volume of CMS there are SQL injection vulnerabilities

Push the volume of CMS is a content management system developed by Hefei Tianxun Information Technology Co. Hefei Tianxun Information Technology Co., Ltd Push Roller CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

File upload vulnerability in MCMS backend up***.do page

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend up.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Directory traversal vulnerability in ESPCMS backend Te***.php file

ESPCMS is a content management system CMS based on PHP and MySQL. A directory traversal vulnerability exists in the ESPCMS backend Te.php file. An attacker can exploit the vulnerability to obtain sensitive information...

PHPOK 5.5 suffers from a command execution vulnerability (CNVD-2020-47655)

PHPOK is a content management system for website construction developed by Shenzhen KunHei Technology Co. A command execution vulnerability exists in PHPOK 5.5, which can be exploited by attackers to gain server privileges...

We-COM Municipality portal CMS SQL Injection Vulnerability

We-COM Municipality portal CMS is a Content Management System CMS from the Italian company We-COM. A SQL injection vulnerability exists in We-COM Municipality portal CMS version 2.1.x. The vulnerability stems from a lack of validation of externally-entered SQL statements in a database-based...

File Upload Vulnerability in Lerx CMS

Lerx CMS is a content management system developed in Java + MySQL. Lerx CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain server privileges...

Command Execution Vulnerability in Zendo cms of Qingdao Easoft Tianchuang Network Technology Co. Ltd (CNVD-2020-45147)

Zendo is the first open source project management software in China. It integrates product management , project management , quality management , document management , organization management and transaction management . Qingdao Easoft Tianchuang Network Technology Co., Ltd Zendo cms has a comman...

SQL injection vulnerability in deituiCMS (CNVD-2020-45161)

deituiCMS is a PHP-based open source content management system. A SQL injection vulnerability exists in deituiCMS, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in deituiCMS (CNVD-2020-45160)

deituiCMS is a PHP-based open source content management system. A SQL injection vulnerability exists in deituiCMS, which can be exploited by attackers to obtain sensitive database information...

Naviwebs Navigate CMS Authorization Issue Vulnerability (CNVD-2020-35977)

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A security vulnerability exists in Naviwebs Navigate CMS version 2.9 r1433, which originated when the program resets passwords, allowing users to continue setting passwords even if an...

PACKET TIDE ExpressionEngine Code Issue Vulnerability

PACKET TIDE ExpressionEngine is the U.S. PACKET TIDE company's set of open source content management system CMS. A security vulnerability exists in PACKET TIDE ExpressionEngine versions prior to 5.3.2. A remote attacker can exploit the vulnerability to execute arbitrary code...

Naviwebs Navigate CMS Authorization Issues Vulnerability

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A security vulnerability exists in the password recovery feature in Naviwebs Navigate CMS version 2.9 r1433, which originates from a notfound message being returned when the user name o...

Code execution vulnerability in SongCMS PHP version

SongCMS is a PHP+MySQL, ASP+Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users quickly build and deploy enterprise-level portals. A code execution vulnerability exists in SongCMS PHP version, which can be exploited by...