HDWPlayer SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! HDWPlayer. An attacker can exploit this vulnerability to execute illegal SQL commands...

CMSmap

It is an offensive tool for web application security testing. The primary CVE ID is not present in the provided context, but the tool is designed to automate the process of detecting security flaws in popular Content Management Systems CMSs such as WordPress, Joomla, Drupal, and Moodle. The tool,...

SQL Injection Vulnerability in LJCMS

LJCMS adopts PHP + Mysql architecture, is a very SEO friendly, full-featured, safe and stable, support multi-terminal display and extremely simple to use enterprise station building system. LJCMS has SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

XSS Vulnerability in Extreme CMS

Extreme CMS is open source and free PHPCMS web content management system. Extreme CMS has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2020-21240)

CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in Filemanager...

SQL Injection Vulnerability in zzzphp version 1.7.5

zzphp is a content management system CMS. A SQL injection vulnerability exists in zzzphp version 1.7.5, which can be exploited by attackers to obtain sensitive database information...

QCMS suffers from a file upload vulnerability (CNVD-2020-26541)

QCMS is an open source content management system for creating responsive websites. QCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of a web server...

Arbitrary File Read Vulnerability in QCMS

QCMS is an open source content management system for creating responsive websites. QCMS suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

XSS vulnerability in XYHCMS backend

XYHCMS is an open source CMS content management system. XYHCMS XSS vulnerability exists in the background , an attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

QCMS Arbitrary File Read Vulnerability

QCMS is an open source content management system CMS for creating responsive websites from China's Velvet Ease Technology Corporation. A security vulnerability exists in the system/controller/backend/template.php file in the QCMS v3.0.1 version of VelvetEase Technology. An attacker can exploit th...

File upload vulnerability in zzphp backend

zzphp is a content management system CMS. A file upload vulnerability exists in the zzzphp backend, which can be exploited by attackers to upload arbitrary php malicious code...

PYSEC-2020-219

In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other users 2FA devices by going to the correct path. The user does not require special permissions in order to do so. By deleting the other users device they can disable the target users 2FA devices and potentially...

Joomla! cross-site scripting vulnerability (CNVD-2020-21001)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions 3.0.0 through 3.9.15. The vulnerability stems from a lack of proper validation of...

OneThink Pu***.cl***.php file suffers from a universal password bypass vulnerability

OneThink is an open source content management framework. A universal password bypass vulnerability exists in the OneThink Pu.cl.php file. An attacker can exploit the vulnerability to obtain data-sensitive information...

SQL injection vulnerability in the us***.cl***.php file of YIXUNCMS enterprise website builder system

YIXUNCMS enterprise website construction system is a set of display website system developed by Yixun Software Studio for small and medium-sized enterprises. There is a SQL injection vulnerability in the us.cl.php file of YIXUNCMS enterprise website builder system. Attackers can use the...

Arbitrary File Deletion Vulnerability in CLTPHP Backend

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. An arbitrary file deletion vulnerability exists in the CLTPHP backend. An attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary File Deletion Vulnerability in SeaCMS Backend

SeaCMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. An arbitrary file deletion vulnerability exists in the SeaCMS backend. An attacker can exploit this vulnerability to delete arbitrary files on the web server...

S-CMS fo***.php suffers from SQL Injection Vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS fo.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CmsEasy has a logic flaw vulnerability

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...

115CMS suffers from a file upload vulnerability (CNVD-2020-20191)

115CMS is a content management system developed with ThinkPHP framework. 115CMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of a web server...