[SECURITY] Fedora 30 Update: drupal7-7.66-1.fc30

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Fedora Update for drupal7 FEDORA-2019-2a0ce0c58c

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Arbitrary File Deletion Vulnerability in CSZ-CMS Management System

CSZ-CMS is an open source web application that allows to manage all content and settings on a website. An arbitrary file deletion vulnerability exists in the CSZ-CMS management system, which can be exploited by an attacker to delete arbitrary files on the server...

Fedora Update for drupal7 FEDORA-2019-f563e66380

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Unauthorized Access Vulnerability in Acme CMS

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Acme CMS has an unauthorized access vulnerability that can be exploited by attackers to conduct unauthorized operations...

Fedora Update for drupal7 FEDORA-2019-0c1d62bf5b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for drupal7 FEDORA-2019-35589cfcb5

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Rabbit Movie CMS has xss vulnerability

Rabbit TV CMS is an open source content building system. A cross-site scripting vulnerability exists in Rabbit Movie CMS. Attackers can use this vulnerability to embed malicious code in web pages to obtain users' personal information or steal administrator cookie information...

File Upload Vulnerability in SDCMSV1.8

Based on Php+MySql environment, it is developed to integrate computer website, mobile website and micro letter public number management system. SDCMSV1.8 has a file upload vulnerability that can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in Super Cms Backend

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

idreamsoft iCMS Cross-Site Scripting Vulnerability (CNVD-2019-12120)

iCMS is an efficient and simple content management system built with PHP and MySQL. A cross-site scripting vulnerability exists in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14, which can be exploited by an attacker via the admincp.php?app=config tab parameter...

idreamsoft iCMS Cross-Site Scripting Vulnerability (CNVD-2019-12119)

iCMS is an efficient and simple content management system built with PHP and MySQL. A cross-site scripting vulnerability exists in app/search/search.app.php in idreamsoft iCMS 7.0.14, which can be exploited by an attacker via the public/api.php?app=search q parameter...

File upload vulnerability in PHPOK ap***.php

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in PHPOK ap.php, which can be exploited by attackers to gain control of the web server...

SQL Injection Vulnerability in ESPCMS in***.php Page

ESPCMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the ESPCMS in.php page, which can be exploited by attackers to obtain sensitive information...

iCMS has an xss vulnerability

iCMS is a content management system CMS built with PHP and MySQL databases. iCMS suffers from an xss vulnerability that can be exploited by attackers to inject arbitrary web script or HTML...

Joomla FacileForms SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla FacileForms. Due to the program adequately filtering user-supplied data before using it in SQL queries. Allows an attacker to compromise the application, access or modify data, or exploit...

Directory Traversal Vulnerability in SDCMS

SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. SDCMS has a directory traversal vulnerability that can be exploited by an attacker to traverse the directory and obtain sensitive information...

MKCMS Cross-Site Request Forgery Vulnerability

MKCMS is a content management system. A cross-site request forgery vulnerability exists in MKCMS version 5.0. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker can exploit the vulnerability to send an...

SAP BASIS Authorization Issues Vulnerability

SAP BASIS is a content management system. SAP BASIS is vulnerable to an authorization issue. An attacker could exploit this vulnerability to gain unauthorized access and obtain sensitive information...

UKcms Cross-Site Request Forgery Vulnerability

Lingji Network Technology UKcms is a PHP-based content management system CMS by China Lingji Network Technology. A cross-site request forgery vulnerability exists in UKcms v1.1.10, which originates from a WEB application that does not adequately validate whether a request comes from a trusted use...