4395 matches found
File Upload Vulnerability in UCMS Content Management System
UCMS is a simple open source content management system. UCMS content management system has a file upload vulnerability that can be exploited by attackers to gain server privileges...
ZZZCMS V1.7.1 version exists arbitrary file reading vulnerability
ZZZCMS enterprise station system using PHP + MYSQL language development, is a set of mature and perfect enterprise station CMS system, the cover is fully functional, customization of powerful, scalable, high security, can easily solve most of the enterprise station needs. ZZZCMS V1.7.1 version of...
ZZCMS SQL Injection Vulnerability (CNVD-2019-24373)
ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in ZZCMS 8.3 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this...
Arbitrary File Deletion, Code Execution Vulnerabilities in ICMS
ICMS is a high content management system built with PHP and MySQL. ICMS suffers from an arbitrary file deletion, code execution vulnerability. An attacker can exploit this vulnerability to delete arbitrary files and gain control of the website...
Ovidentia Cross-Site Scripting Vulnerability
Ovidentia is an open source content management system and collaboration platform based on PHP and MySQL by the French CANTICO team, which can be used for publishing and managing projects, publication and article management, schedule sharing, and more. A cross-site scripting vulnerability exists i...
Babel Input Validation Error Vulnerability
Babel is a multilingual support module for use in content management systems. An input validation error vulnerability exists in Babel. The vulnerability arises from a network system or product that does not properly validate input data...
S-CMS php version e-commerce system v1.5 SQL injection vulnerability in background aj***.php order parameter
Ltd. is mainly engaged in computer software, hardware development and sales, Internet technology development, technical services, network information systems integration, web design, network engineering design, installation, commissioning, maintenance, software outsourcing services. S-CMS php...
Command execution vulnerability in ZZCMS 2018 version backend
ZZCMS is a content management system CMS developed by ZZCMS in China. A command execution vulnerability exists in the backend of ZZCMS 2018 version, which can be exploited by an attacker to gain control of the web server...
Code Execution Vulnerability in CICMS v2.9
CICMS system is a php+mysql developed, CodeIgniter based enterprise building system. A code execution vulnerability exists in CICMS v2.9, which can be exploited by attackers to gain control of a web server...
Code Execution Vulnerability in AIT CMS
Hainan Zanzan Network Technology Co., Ltd. is a professional website construction, network services, operation technology output network company in the industry. AIT CMS code execution vulnerabilities, attackers can use the vulnerability to execute arbitrary commands, access to server privileges...
SQL Injection Vulnerability in DOYOCMS System
DOYOCMS free and open source PHP building system , can be widely used for personal , business , government , institutions and many other website construction . DOYOCMS system SQL injection vulnerability , attackers can use the vulnerability to obtain database information...
Code Execution Vulnerability in SDCMS V1.8
SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A code execution vulnerability exists in SDCMS V1.8, which can be exploited by an attacker to gain server privileges...
SQL Injection Vulnerability in AIT CMS
Hainan Zanzan Network Technology Co., Ltd. is a professional website construction, network services, operation technology output network company in the industry. There is a SQL injection vulnerability in AIT CMS, which can be exploited by attackers to obtain sensitive database information...
Command Execution Vulnerability in ctcms 2.0.2 Backend
Chong Sheng Network Technology has developed Cscms Portal Content Management System, Ctcms Network Video Education Management System, Aggregate Payment, and a Multi-Merchant Entry Card Issuing Platform Management System. A command execution vulnerability exists in the ctcms 2.0.2 backend, which c...
CVE-2019-13086
core/MYSecurity.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrfcsz parameter...
Command Execution Vulnerability in HDCMS
HDCMS is a content management system software package developed in PHP+Mysql. HDCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of a web server...
Logic Flaw Vulnerability in sdcms V1.8
SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A logic flaw vulnerability exists in sdcms V1.8, which can be exploited by attackers to obtain sensitive information...
Micro Deal Factory SQL Injection Vulnerability in Joomla!
Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. Micro Deal Factory is used in one of the web marketing promotion plug-ins. A SQL injection vulnerability exists in Joomla! The vulnerability stems from...
xss vulnerability in PowerEasy CMS, a website building system of Guangdong Dynamic Easy Software Co.
Dynamic Easy Powereasy cms 2006 is a set of various types of small and medium-sized site construction and management and design and development of a general-purpose site management system also known as content management system. Guangdong Dynamic Easy Software Co., Ltd. building system PowerEasy...