Arbitrary file reading vulnerability in zzzzphp

zzphp is a content management system CMS. An arbitrary file read vulnerability exists in zzzphp, which can be exploited by an attacker to read arbitrary files to obtain sensitive information...

The vulnerability of the software processing module in the Plone content management system allows attackers to enhance their privileges.

The vulnerability of the Plone content management system’s software processing module is related to errors in processing the plone.app.contenttypes package. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Command Execution Vulnerability in seacms Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the seacms backend. An attacker can exploit this vulnerability to gain control of the web server...

SQL Injection Vulnerability in xyhCMS of Kunming Yuntao Technology Co. Ltd (CNVD-2020-22707)

XYHCMS is a completely open source CMS content management system, simple, easy to use, secure, stable and free. Kunming Yuntao Technology Co. xyhCMS SQL injection vulnerability, attackers can exploit the vulnerability to obtain database privileges...

XSS Vulnerability in Yunye CMS

Yunye CMS is developed by Yunye Information Technology is a specialized for small and medium-sized enterprise website construction of php open source CMS. Yunye CMS has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...

Command Execution Vulnerability in eyoucms Frontend

Eyoucms is based on TP5.0 framework for the core development of free + open source enterprise content management system . Children's foreign trade responsive English website template comes with eyoucms core. eyoucms front-end command execution vulnerability , attackers can use the vulnerability t...

DNN Path Traversal Vulnerability

DNN also known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. A path traversal vulnerability exists in DNN 9.4.4 and earlier versions. The...

E-House CMS of Hainan E&Y Technology Co., Ltd. suffers from a logic flaw vulnerability

EJU real estate system ejucms is a set of localized O2O real estate website platform. Hainan EJU Technology Co., Ltd. ejucms CMS logic flaws exist in the vulnerability, attackers can use the vulnerability to create any directory...

Stored Cross-Site Scripting Vulnerability in LJCMS

LJCMS is a free and open source content management system. A stored cross-site scripting vulnerability exists in LJCMS. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-18774)

ZZCMS is a content management system for Merchants Network. ZZCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

php deserialization vulnerability in dsmall v5.0.6 frontend

dsmall mall system is a complete set of B2B2C multi-store mall solution. The system uses the domestic excellent open source framework THinkPHP , H5 end using vue.js , front and back end separation , based on PHP MySQL development , using B/S architecture. dsmall v5.0.6 front-end php deserializati...

AKCMS suffers from a command execution vulnerability (CNVD-2020-10179)

AKCMS is a lightweight content management system based on PHP and MySQL. A command execution vulnerability exists in AKCMS, which can be exploited by attackers to execute commands and gain server privileges...

Arbitrary File Read Vulnerability in AKCMS

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS has an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary files...

WordPress Database Reset Plugin Vulnerability (CVE-2020-7047, CVE-2020-7048)

A vulnerability recently disclosed by Wordfence and published as CVE-2020-7047 and CVE-2020-7048 allows an attacker to take over vulnerable WordPress-based websites. Functionality in the WP Database Reset plugin introduced the vulnerability, which allows any unauthenticated user to reset any tabl...

The State of Vulnerabilities in 2019

As a web application firewall provider, part of our job at Imperva is to continually monitor for new security vulnerabilities. To do this, we use internal software that collects information from various data sources such as vulnerability databases, newsletters, forums, social media and more,...

SQL Injection Vulnerability in CmsEasy

CmsEasy is a web content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in MetInfo us***.cl***.php File

MetInfo is an open source and free CMS building system suitable for enterprise building, MetInfo enterprise website management system is mainly used to build enterprise websites, using PHP + Mysql architecture. MetInfo us.cl.php file SQL injection vulnerability. Attackers can use the vulnerabilit...

BSS Continuity CMS Denial of Service Vulnerability

BSS Continuity CMS is a content management system CMS from BSS UK. A denial of service vulnerability exists in BSS Continuity CMS version 4.2.22640.0. An attacker can exploit this vulnerability to cause the underlying database to run with an overload...

SQL Injection Vulnerability in iCMS Backend da***.ad***.php File

iCMS is a content management system built with PHP and MySQL. A SQL injection vulnerability exists in the iCMS backend da.ad.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Fedora Update for drupal7 FEDORA-2019-4917943339

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...