Reinstallation Vulnerability in S-CMS Enterprise Website Builder System

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a reinstallation vulnerability in S-CMS, which can be exploited by attackers to reinstall the system...

Joomla Object Injection

Added: 10/24/2019 Background Joomla is a content management system written in PHP. Problem An object injection vulnerability in Joomla could allow a remote, unauthenticated attacker to execute arbitrary commands on the server. This vulnerability has been nicknamed "Rusty Joomla". Resolution Upgra...

Code Execution Vulnerability in UCMS Backend File Management

UCMS is a simple open source content management system. A code execution vulnerability exists in the UCMS backend file management, which can be exploited by an attacker to gain control of the web server...

SQL Injection Vulnerability in OurPHP ou***_pa***.php Page

OurPHP is a web content management system developed using the PHP language. An SQL injection vulnerability exists in the OurPHP oupa.php page, which can be exploited by attackers to obtain sensitive information...

PowerCMS Open Redirect Vulnerability

PowerCMS is a content management system. An open redirection vulnerability exists in PowerCMS, which can be exploited by an attacker to redirect users to arbitrary websites...

Command Execution Vulnerability in Pluck-CMS

Pluck is a very simple and easy to use CMS Content Management System for PHP platforms. A command execution vulnerability exists in Pluck-CMS, which can be exploited by an attacker to execute remote code to gain privileges in a web application...

XSS Vulnerability in LJCMS

LJCMS is a free and open source content management system. LJCMS suffers from an XSS vulnerability that can be exploited by attackers to inject arbitrary web script or HTML...

WBCE CMS File Rename Filter Bypass Vulnerability

WBCE CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in the admin/media/rename.php file in WBCE CMS 1.4.0 and earlier versions. An attacker can exploit the vulnerability to rename media file names and extensions to execute arbitrary PHP...

LJCMS has an override access vulnerability

LJCMS is a free and open source content management system. LJCMS suffers from an override access vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in UQCMS

UQCMS is an easy-to-use B2B2C multi-store system based on PHP+MySql. A file upload vulnerability exists in UQCMS, which can be exploited by attackers to obtain sensitive information...

JIZHICMS Cross-Site Request Forgery Vulnerability

Extreme Networks Technology JIZHICMS Extreme CMS is a set of open source content management system CMS of China Extreme Networks Technology. A cross-site request forgery vulnerability exists in JIZHICMS version 1.5.1, which can be exploited by remote attackers to add administrators...

Code execution vulnerability in HkCMS backend Ad***.php file

HkCMS is a free and open source content management system, the core of the Thinkphp5.0 framework and many other open source software, has been committed to providing free and open source content management system for enterprise building station. HkCMS backend Ad.php file has a code execution...

File Upload Vulnerability in ZZZCMS

ZZZCMS enterprise station system using PHP + MYSQL language development, is a set of mature and perfect CMS system, the cover is fully functional, customization of powerful, scalable, high security, can easily solve most of the enterprise station needs. ZZZCMS file upload vulnerability, attackers...

MetInfo SQL Injection Vulnerability (CNVD-2019-34804)

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. An attacker can exploit this vulnerability to execute illegal SQL commands...

MetInfo SQL Injection Vulnerability (CNVD-2019-34803)

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. An attacker can exploit this vulnerability to execute illegal SQL commands...

CVE-2019-17369

OTCMS v3.85 has CSRF in the admin/memberdeal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin...

Arbitrary file deletion vulnerability in Bacardi CMS pi***.php page

Bacardi CMS micro-mall is a free and open source object-oriented multi-store multi-user micro-mall PHP development framework , created in June 2014 , follow the Apache Licence2 open source agreement released , is to quickly simplify the development of enterprise micro-mall applications , to help...

SilverStripe License Issues Vulnerabilities

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . An authorization issue vulnerability exists in SilverStripe 4.3.3 and earlier versions...

File Upload Vulnerability in HKCMS

HkCMS has been committed to providing free and open source content management system for enterprise station building, HkCMS has excellent expansion and secondary development capabilities, can be adapted to enterprise lightweight system development and deployment. HKCMS file upload vulnerability,...

Arbitrary Deletion Vulnerability in HongCMS v4.0 uc_a***.php File

HongCMS is an open source lightweight content management system CMS. HongCMS v4.0 uca.php file contains an arbitrary deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files, resulting in a system reinstallation...