Command Execution Vulnerability in eyoucms of Hainan Zanzan Network Technology Co. Ltd (CNVD-2020-44116)

eyoucms is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source CMS. Hainan Zanzan Network Technology Co., Ltd. eyoucms command execution vulnerability, the exploiters can use the vulnerability to obtain server privileges...

Zenphoto Code Injection Vulnerability

Zenphoto is a content management system CMS. The Zenphoto code injection vulnerability can be exploited by an attacker to execute arbitrary PHP code...

ZZCMS suffers from XSS vulnerability (CNVD-2020-34030)

ZZCMS is a PHP and MySql based content management system. ZZCMS suffers from an XSS vulnerability that can be exploited by an attacker to obtain an administrator cookie...

SQL Injection Vulnerability in SiteServer CMS Backend

SiteServer CMS is an open source and free enterprise-level CMS system developed by Beijing Baiyong Qianwei Software Technology Development Co. A SQL injection vulnerability exists in the backend of SiteServer CMS. An attacker can exploit the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in BEESCMS Backend ad***_bo***.php Page

BEESCMS is a scalable content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the adbo.php page in the BEESCMS backend. An attacker can exploit the vulnerability to obtain sensitive database information...

Fedora: Security Advisory for drupal7 (FEDORA-2020-11be4b36d4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

File Inclusion Vulnerability in Polyglot CMS

Polygraph cms is a lightweight cms based on PHP+Mysql architecture that is quick to get started, flexible, simple and easy to use. There is a file inclusion vulnerability in JUGGING cms, which can be exploited by attackers to gain server privileges...

EyouCms suffers from XSS vulnerability (CNVD-2020-32622)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms XSS vulnerability , attackers can exploit the vulnerability to obtain user cookie information...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-32623)

LJCMS is a free and open source content management system. LLJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

Logic flaw vulnerability exists in cmseasy (CNVD-2020-32605)

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...

Arbitrary file deletion vulnerability in beescms

BEESCMS is a scalable content management system CMS based on PHP and MySQL. An arbitrary file deletion vulnerability exists in beescms, which can be exploited by an attacker to delete system files...

[SECURITY] Fedora 32 Update: drupal7-7.70-1.fc32

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

PHPOK suffers from a file upload vulnerability (CNVD-2020-38450)

PHPOK is a content management system for website construction developed by Shenzhen 锟铻科技有限公司 formerly known as PHPOK Studio, written in PHP, default MySQL database storage, based on the LGPL open source agreement license released to the online sharing use. PHPOK file upload vulnerability exists...

XSS vulnerability in Extreme CMS (CNVD-2020-38477)

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as administrator cookies...

Code Execution Vulnerability in Ear Distribution Frontend

Ear Distribution is a content management system. A code execution vulnerability exists in the frontend of Ear Distribution. An attacker could gain server privileges by constructing malicious code...

File upload vulnerability in Extreme CMS backend (CNVD-2020-33342)

Extreme CMS is an open source and free PHPCMS web content management system. A file upload vulnerability exists in the backend of Extreme CMS. Attackers can use the vulnerability to upload webshell and gain server privileges...

File Upload Vulnerability in OKCMS Web Content Management System of Zibo Oukai Information Technology Co.

Zibo Oukai Information Technology Co., Ltd. is a localized Internet company specializing in station building + promotion + operation in one. A file upload vulnerability exists in the OKCMS web content management system of Zibo Oukai Information Technology Co. An attacker can exploit the...

Arbitrary File Deletion Vulnerability in Aptar CMS (CNVD-2020-32581)

Aptar CMS website management system is developed with PHP+MYSQL technology and MVC model, with a clear structure and easy-to-maintain code. Aptar CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete server files...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-33092)

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Logic flaw vulnerability in LJCMS of Beijing Liangjing Zhicheng Technology Co., Ltd (CNVD-2020-33125)

LJCMS is a free and open source content management system. A logic flaw vulnerability exists in LJCMS of Beijing Liangjingzhicheng Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...