CMS Made Simple Input Validation Error Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. An input validation error vulnerability exists in the News...

Ilch Remote Code Execution Vulnerability

Ilch is an open source content management system CMS. A remote code execution vulnerability exists in Ilch. An attacker could exploit this vulnerability to execute code...

Metinfo SQL Injection Vulnerability (CNVD-2019-42846)

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this...

SQL Injection Vulnerability in Super cms v2.39 fr***.ma***.php Page (CNVD-2019-47186)

Super CMS content management system in order to solve the problem of website optimization and development of a set of products, it is an efficient open source content management system, the product is based on PHP + MYSQL architecture, can run on Windows, Linux, MacOSX, Solaris and other various...

File Upload Vulnerability in Super CMS Backend

Super CMS Content Management System is a set of products developed to solve the problem of website optimization, it is an open source content management system, the product is based on PHP + MYSQL architecture, and it can run on various platforms such as Windows, Linux, MacOSX, Solaris and so on...

SQL Injection Vulnerability in UsualToolCMS

UsualToolCMS UTCMS is a content management system and rapid site building framework. Using template separation technology , support the creation of a variety of application platforms . Support for secondary development , rich template language and API for developers to call . UsualToolCMS SQL...

Command Execution Vulnerability in LJCMS

LJCMS using PHP + Mysql architecture, is a very SEO-friendly, full-featured, safe and stable, support for multi-terminal display and extremely simple to use enterprise station-building system. LJCMS command execution vulnerabilities, attackers can use the vulnerability to obtain server system...

Arbitrary File Read Vulnerability in HkCMS

HkCMS has been committed to providing free and open source content management system for enterprise station building, HkCMS has excellent expansion and secondary development capabilities, can be adapted to enterprise lightweight system development and deployment. HkCMS arbitrary file reading...

SQL Injection Vulnerability in Super CMS da***.ma***.php

Super CMS content management system in order to solve the problem of website optimization and development of a set of products, it is an efficient open source content management system, the product is based on PHP + MYSQL architecture, can run on Windows, Linux, MacOSX, Solaris and other various...

HkCMS suffers from an arbitrary file download vulnerability

HkCMS has been committed to providing free and open source content management system for enterprise station building, HkCMS has excellent expansion and secondary development capabilities, can be adapted to enterprise lightweight system development and deployment. HkCMS arbitrary file download...

SQL Injection Vulnerability in ED01-CMS

ED01-CMS is a content management system. ED01-CMS suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information about an administrator...

Code Execution Vulnerability in KiteCMS Backend

KiteCms is an open source content management system based on ThinkPHP 5.0.9. A code execution vulnerability exists in the KiteCMS backend. An attacker can construct a directory structure to execute arbitrary code and gain server privileges...

thejshen Globitek CMS 1.4 - (id) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: thejshen Globitek CMS 1.4 - 'id' SQL Injection Exploit Author: Cakes Vendor Homepage: https://github.com/thejshen/contentManagementSystem Software Link: https://github.com/thejshen/contentManagementSystem.git Version: 1.4 Tested...

YXcms background there are arbitrary file deletion vulnerability

YXcms is a PHP and MySQL based enterprise building content management system CMS. An arbitrary file deletion vulnerability exists in the YXcms backend. An attacker can exploit the vulnerability to delete arbitrary files read into the directory...

TYPO3 Information Disclosure Vulnerability (CNVD-2019-40297)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. An information disclosure vulnerability exists in TYPO3, which arises from errors in configuration and other errors in the operation of a networked system or product, and can be exploited b...

XSS Vulnerability in ED01-CMS Content Management System

ED01-CMS is a content management system. An XSS vulnerability exists in the ED01-CMS content management system, which can be exploited by attackers to obtain sensitive information such as cookies...

XSS Vulnerability in ED01-CMS

ED01-CMS is a content management system and the CMS project of Edwin Diaz's Udemy course "PHP for Beginners - Become a PHP Master". An XSS vulnerability exists in the ED01-CMS content management system, which can be exploited by attackers to obtain sensitive information such as cookies...

Code execution vulnerability in seacms backend (CNVD-2019-43686)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms, which can be exploited by attackers to gain server privileges...

Worry-free cms has arbitrary file deletion vulnerability

Worry-free cms is one of the most professional, most used, most widely used small website builder system for small and medium-sized enterprises to build their own website. Worry-free cms arbitrary file deletion vulnerability, an attacker can take advantage of the vulnerability to arbitrary file...

Tiki Wiki CMS Groupware File Inclusion Vulnerability

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A file inclusion vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which can be exploited by an attacker to include arbitrary files...