File upload vulnerability in OFCMS backend ueditor uploadFIle

OFCMS is a content management system developed based on java technology. There is a file upload vulnerability in OFCMS backend ueditor uploadFIle, which can be exploited by attackers to upload webshell and gain server privileges, posing information leakage and operational security risks...

There is an information leakage vulnerability in dedecms

Dream Content Management System DedeCMS is a PHP open source website management system. DedeCMS suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

OFCMS background upload file upload vulnerability

OFCMS is a content management system developed based on java technology. There is a file upload vulnerability in OFCMS background upload, which can be exploited by attackers to upload webshell and gain server privileges, posing information leakage and operational security risks...

Remote Code Execution Vulnerability in JTBC (PHP) Content Management System

JTBC is an open source and free cross-platform web content management system solution. A remote code execution vulnerability exists in the JTBC PHP content management system. An attacker can exploit this vulnerability to execute arbitrary code...

Directory Traversal Vulnerability in JTBC (PHP) Content Management System

JTBC is an open source and free cross-platform web content management system solution. A directory traversal vulnerability exists in the JTBC PHP content management system. An attacker can exploit this vulnerability to traverse any directory on the server...

SQL injection vulnerability in iCMS sp***.ad***.php page

iCMS is a free and simple PHP content management system. A SQL injection vulnerability exists in the iCMS sp.ad.php page. An attacker can exploit this vulnerability to obtain sensitive database information...

zzcms cross-site scripting vulnerability (CNVD-2019-13261)

ZZCMS is a content management system CMS by the ZZCMS team in China. A cross-site scripting vulnerability exists in the /uploadimgform.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to inject arbitrary HTML or web scripts with the help of the 'noshuiyin' parameter...

Directory Traversal Vulnerability in OFCMS Backend

OFCMS is a content management system developed based on java technology. A directory traversal vulnerability exists in the backend of OFCMS, which can be exploited by an attacker to traverse the directory and obtain sensitive information...

File Upload Vulnerability in OFCMS Backend

OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the background of OFCMS, which can be exploited by an attacker to upload arbitrary files...

Command Execution Vulnerability at OFCMS Backend Template Customization

OFCMS is a content management system developed based on java technology. A command execution vulnerability exists in the OFCMS backend template customization, which can be exploited by an attacker to execute arbitrary commands...

SQL Injection Vulnerability in OFCMS System Management Service

OFCMS is a content management system developed based on java technology. A SQL injection vulnerability exists in the OFCMS system administration, which can be exploited by attackers to obtain sensitive information from the database...

OFCMS backend editUploadImage method has file upload vulnerability

OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the editUploadImage method in the background of OFCMS, which can be exploited by an attacker to upload a webshell and gain access to the server, posing an information leakage and...

OFCMS Backend SQL Injection Vulnerability

OFCMS is a content management system based on Java technology. A backend SQL injection vulnerability exists in versions of OFCMS prior to 1.1.3. An attacker can exploit the vulnerability to launch admin/system/generate/create?sql= SQL injection attack...

OFCMS Background Command Execution Vulnerability

OFCMS is a content management system based on Java technology. A background command execution vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability can be exploited to execute commands via a template file with ' $ ex"' followed by the command...

OFCMS Backend Directory Traversal Vulnerability

OFCMS is a content management system based on Java technology. Versions of OFCMS prior to 1.1.3 have an admin/cms/template/getTemplates.html?respath=res&updir=... /directory traversal vulnerability. An attacker can exploit the vulnerability to traverse directory information...

OFCMS Backend File Upload Vulnerability

OFCMS is a content management system based on Java technology. A background file upload vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability stems from the blocking of .jsp and .jspx files that fails to take into account the file.jsp::$DATA of the admin/comn/service/upload...

OFCMS backend ueditor uploadImage file upload vulnerability

OFCMS is a content management system based on Java technology. A backend ueditor uploadImage file upload vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability stems from the blocking of .jsp and .jspx files without taking into account the file.jsp::$DATA of the...

OFCMS backend ueditor uploadVideo file upload vulnerability

OFCMS is a content management system based on Java technology. A backend ueditor uploadVideo file upload vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability stems from the blocking of .jsp and .jspx files that fails to take into account file.jsp::$DATA in the...

OFCMS background editUploadImage file upload vulnerability

OFCMS is a content management system based on Java technology. A backend editUploadImage file upload vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability stems from the blocking of .jsp and .jspx files without taking into account file.jsp::$DATA of the...

OFCMS Backend Arbitrary File Write Vulnerability

OFCMS is a content management system based on Java technology. OFCMS version before 1.1.3 has a backend arbitrary file write vulnerability. An attacker can exploit this vulnerability by traversing the admin/cms/template/getTemplates.html?respath=res directory to write arbitrary content in the...