Command execution vulnerability in the we***.ma***.php file in the backend of Super CMS

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

Command Execution Vulnerability in Super CMS Backend ca***.ma***.php File

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

Fork CMS 5.8.0 Script Insertion

Document Title: =============== Fork CMS v5.8.0 - Multiple Persistent Web Vulnerbilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2208 ID 3073: https://github.com/forkcms/forkcms/pull/3073 Release Date: ============= 2020-04-17 Vulnerability...

Logic Flaw Vulnerability in ETA CMS

ETA CMS is a simple, practical and efficient website builder. A logic flaw vulnerability exists in ETA CMS, which can be exploited by an attacker to modify the administrator password...

LJCMS suffers from a file upload vulnerability (CNVD-2020-26416)

LJCMS is an open source enterprise website management system based on PHP+MYSQL. LJCMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of a web server...

Arbitrary File Read Vulnerability in EDI CMS

ETA CMS is a simple, practical and efficient website builder. ETA CMS has an arbitrary file read vulnerability that can be exploited by an attacker to read configuration files on the server...

Macs Framework 1.14f CMS - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: Macs Framework 1.14f CMS - Persistent Cross-Site Scripting Software Link: https://sourceforge.net/projects/macs-framework/files/latest/download CVE: N/A Document Title: =============== Macs Framework v1.14f CMS - Multiple Web...

Code Execution Vulnerability in ETA CMS (CNVD-2020-26413)

ETA CMS is a simple, practical and efficient website builder. A code execution vulnerability exists in EDA CMS, which can be exploited by an attacker to gain control of a web server...

Code Execution Vulnerability in ETA CMS

ETA CMS is a simple, practical and efficient website builder. A code execution vulnerability exists in EDA CMS, which can be exploited by an attacker to gain control of a web server...

Code Execution Vulnerability in SongCMS

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . SongCMS code execution vulnerability, attackers use the vulnerability to obtain...

Arbitrary File Deletion Vulnerability in Fiyocms System

Fiyocms is a free and open source cms system for rapid development of personal and corporate websites and blogging systems. Fiyocms system has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file under the server...

xyhcms background exists arbitrary file download vulnerability

xyhcms is a completely open source CMS content management system, simple, easy to use, secure, stable and free. xyhcms background arbitrary file download vulnerability , attackers can exploit the vulnerability to download sensitive system files...

Arbitrary File Read Vulnerability in iCMS

iCMS is a content management system built with PHP and MySQL. iCMS has an arbitrary file reading vulnerability, which can be exploited by an attacker to read any file on the server and disclose sensitive information...

SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25102)

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ZZCMS team's backend ztse.php file, which can be exploited by an attacker to obtain sensitive information from the database...

WCMS suffers from SQL injection vulnerability (CNVD-2020-25555)

WCMS is an open source lightweight CMS system. WCMS suffers from an SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in AlpacaCMS

AlpacaCMS is an open source lightweight tree CMS system . It is based on php+mysql and b2core MVC as the underlying architecture . AlpacaCMS SQL injection vulnerability , an attacker can exploit the vulnerability to obtain database data...

File upload vulnerability in jizhicms

jizhicms is an open source cms developed by Langfang Extreme Networks Technology Co. jizhicms has a file upload vulnerability that can be exploited by an attacker to gain server administrator privileges...

QCMS is vulnerable to XSS

QCMS website management system is a PHP lightweight system developed through MVC architecture. An XSS vulnerability exists in the QCMS backend, which can be exploited by attackers to obtain user login credentials...

HuCart Enterprise Building System v5.7.7 has file upload vulnerability

HuCart is a PHP+Mysql based enterprise building system CMS that can run on various server platforms such as Linux and Windows. A file upload vulnerability exists in HuCart Enterprise CMS v5.7.7, which can be exploited by attackers to upload arbitrary files...

File Deletion Vulnerability in YCCMS Controller Directory Na***.class.php

YCCMS is a PHP version of a lightweight CMS builder. A file deletion vulnerability exists in the YCCMS controller directory Na.cl.php, which can be exploited by an attacker to delete any file in any directory...