S-CMS SQL Injection Vulnerability (CNVD-2019-14076)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS PHP v1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute...

Fedora Update for drupal7 FEDORA-2019-2fbce03df3

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: drupal7-7.65-1.fc29

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

ZZZCMS zzzphp code injection vulnerability

ZZZCMS zzzphp is a content management system CMS. A code injection vulnerability exists in ZZZCMS zzzphp v1.6.3, which originates from a network system or product that does not properly filter specific elements of externally entered data during the construction of a code segment. An attacker can...

FlatCore Arbitrary File Upload Vulnerability

flatCore is a lightweight content management system CMS based on PHP and SQLite. A security vulnerability exists in the acp/acp.php file in flatCore version 1.4.7. No details of the vulnerability are provided at this time...

File upload vulnerability in tx***_fi***.php file in TextpatternCMS backend

TextpatternCMS is a content management system written in PHP. A file upload vulnerability exists in the txfi.php file in the backend of TextpatternCMS. It allows an attacker to upload a webshell and gain server privileges...

S-CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-08730)

S-CMS is a content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in S-CMS PHP v1.0, which can be exploited by remote attackers to add the admin user with the help of the 4.edu.php/admin/ajax.php?type=admin&action=add&lang=0 URI...

CVE-2019-9057

An issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to reach an unserialize call with an untrusted parameter, and achieve authenticated object injection...

PHPCMS Cross-Site Scripting Vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A cross-site scripting vulnerability exists in PHPCMS versions 9.6.x through 9.6.3. A remote attacker can exploit this...

File Upload Vulnerability in QCMS 3.0.1 Backend

QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in QCMS version 3.0.1. An attacker can exploit the vulnerability to forge bypass the background login, upload webshell, and gain server privileges...

SQL Injection Vulnerability in MKCMS 5.0

MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version 5.0, which can be exploited by attackers to obtain sensitive database information...

Placeto CMS Alpha 4 SQL Injection

Placeto CMS Alpha v4 - 'page' SQL Injection Title: Placeto CMS Date: 21.03.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://sourceforge.net/projects/placeto/ Software Link: https://sourceforge.net/projects/placeto/files/alpha-rv.4/placeto.zip Version: Alpha rv.4 Category: Webapps...

Placeto CMS Alpha v4 - 'page' SQL Injection

Placeto CMS Alpha v4 - 'page' SQL Injection Title: Placeto CMS Date: 21.03.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://sourceforge.net/projects/placeto/ Software Link: https://sourceforge.net/projects/placeto/files/alpha-rv.4/placeto.zip Version: Alpha rv.4 Category: Webapps...

Super CMS suffers from a file upload vulnerability (CNVD-2019-10024)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and development of a set of products. Super CMS has a file upload vulnerability that can be exploited by attackers to upload malicious files and gain server privileges...

SQL Injection Vulnerability in the art***.php and con***.php Modules of iCMS

iCMS is an efficient and simple content management system built with PHP and MySQL. The art.php and con.php modules of iCMS have a SQL injection vulnerability module, which can be exploited by attackers to obtain sensitive database information...

eNdonesia Portal 8.7 - Multiple Vulnerabilities

=========================================================================================== Exploit Title: eNdonesia Portal 'banners.php' SQL Inj. Dork: N/A Date: 19-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://www.endonesia.org/ Software Link:...

MKCMS v5.0 has an xss vulnerability

MKCMS is a content management system. MKCMS v5.0 suffers from an xss vulnerability that can be exploited by attackers to obtain an administrator cookie...

File Upload Vulnerability in WTCMS

WTCMS is a content management system CMS based on Thinkphp. WTCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

SQL Injection Vulnerability in MKCMS 5.0 bp***.php Page

MKCMS is a content management system. A SQL injection vulnerability exists in the MKCMS 5.0bp.php page, which can be exploited by an attacker to obtain sensitive information from the database...

File upload vulnerability in OFCMS backend ueditor uploadVideo

OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the OFCMS backend ueditor uploadVideo, which can be exploited by an attacker to upload a webshell and gain access to the server, posing an information leakage and operational security ri...