Code execution vulnerability in EyouCms (CNVD-2020-44392)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms has a code execution vulnerability that can be exploited by attackers to obtain server administrative privileges...

EyouCms has a logic flaw vulnerability

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms has a logic flaw vulnerability that can be exploited by attackers to obtain server administrative privileges...

Victor CMS Cross-Site Scripting Vulnerability (CNVD-2021-24255)

Victor CMS is a simple content management system. A persistent cross-site scripting vulnerability exists in admin/users.php?source=adduser in Victor CMS 1.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the username, userfirstname, or userlastname parameters...

Naviwebs Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2020-35981)

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A cross-site scripting vulnerability exists in Naviwebs Navigate CMS version 2.9. The vulnerability stems from a lack of proper validation of client-side data by the web application. An...

SQL Injection Vulnerability in XSLCMS ca***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS ca.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in XSLCMS pr***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS pr.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in XSLCMS jo***-sh***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS jo-sh.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in XSLCMS ne***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS ne.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in XSLCMS ne***-sh***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS ne-sh.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in XSLCMS fe***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS fe.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in XSLCMS ca***-sh***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS ca-sh.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

Stored Cross-Site Scripting Vulnerability in NoneCms

NoneCms is an open source CMS Content Management System for building corporate websites, personal blogs and supporting mobile. A stored cross-site scripting vulnerability exists in NoneCms. Attackers can use the vulnerability to obtain administrator cookies...

SQL Injection Vulnerability in XSLCMS co***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS co.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in XSLCMS ab***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS ab.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

Drupal Command Injection Vulnerability

Drupal is an open source content management system developed by the Drupal community using the PHP language. A security vulnerability exists in Drupal versions 8.8.x before 8.8.8, 8.9.x before 8.9.1, and 9.0.x before 9.0.1. An attacker can exploit the vulnerability to execute code with the help o...

SQL Injection Vulnerability in YUNUCMS of Zhenjiang Yunyu Network Technology Co., Ltd (CNVD-2020-41337)

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in PHPCMS of Coolmusic (Beijing) Culture Media Co.

PHPCMS is a self-developed framework using the OOP object-oriented approach. There is a SQL injection vulnerability in PHPCMS of CoolSkate Beijing Culture Media Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

File Upload Vulnerability in Yunyou CMS of Zhenjiang Yunyou Network Technology Co. Ltd (CNVD-2020-41769)

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang City, Yun You Network Technology Co., Ltd. Yun You CMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-44109)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Arbitrary File Read Vulnerability in Extreme CMS

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...