SQL Injection Vulnerability in the Registration Module of Guowei CMS School Cluster System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system registration module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

Arbitrary File Read Vulnerability in Metinfo 6.0.0 Backend

MetInfo is a content management system developed using PHP and Mysql. An arbitrary file read vulnerability exists in the Metinfo version 6.0.0 backend. An attacker can exploit the vulnerability to read sensitive files on a website...

MiniCMS has multiple vulnerabilities

miniCMS a mini content management system designed for personal websites. MiniCMS has multiple vulnerabilities that can be exploited by attackers to obtain sensitive information on a website...

Command Execution Vulnerability in AppCMS Backend Template Management Service

APPCMS is a professional APP content management system that provides a variety of extension modules, such as information, recommended positions, topics, friendly links, body internal links and so on, to help webmasters better personalize their own websites. A command execution vulnerability exist...

CVE-2018-14334

manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of control. Consequently, one can upload and execute a .php file, a similar issue to CVE-2018-8766...

ONELAN CMS Arbitrary File Upload Vulnerability

ONELAN Content Management System CMS is a content management system. An arbitrary file upload vulnerability exists in ONELAN CMS, which could be exploited by an attacker to upload arbitrary files to the system...

ONELAN CSM File Read Vulnerability

ONELAN Content Management System CMS is a content management system. A file read vulnerability exists in ONELAN CSM that could allow an authenticated user to access arbitrary files in the / data directory of the system...

Code execution vulnerability in xdcms

xdcms is a fully open source and general purpose content management system. A code execution vulnerability exists in xdcms. The vulnerability is due to the background configuration page fails to completely filter the content submitted by the administrator due to the attacker can be exploited to...

NUCMS V1.1 SQL Injection Vulnerability in Backend

NUCMS content management system is an open source website management system. NUCMS V1.1 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

AT&T Bizcircle - Persistent Profile Cross Site Vulnerability

Document Title: =============== AT&T Bizcircle - Persistent Profile Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2108 AT&T Reference ID: 1502971499862 Vulnerability Magazine:...

Arbitrary File Deletion Vulnerability in ZZCMS Version 8.3

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. An arbitrary file deletion vulnerability exists in ZZCMS version 8.3. An attacker can exploit the vulnerability to delete arbitrary files...

SQL Injection Vulnerability in Azeus CMS

Azeus CMS is a cms system made by Azeus Studio, this CMS is written in UTF-8 coding. SQL injection vulnerability exists in Azeus CMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

mao10cms cross-site scripting vulnerability

mao10cms is an open source content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in version 6 of mao10cms. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of 'm=bbs&a=index' page...

File Upload Vulnerability in BEESCMS Enterprise Website Management System V4.0

BEESCMS is a scalable content management system CMS based on PHP and MySQL. A file upload vulnerability exists in BEESCMS Enterprise Website Management System V4.0. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

iCMS SQL Injection Vulnerability (CNVD-2018-14361)

iCMS is a content management system CMS built with PHP and MySQL databases. A SQL injection vulnerability exists in the spider.admincp.php file in iCMS version 7.0.8. A remote attacker can exploit this vulnerability by sending an app=spider&do=batch request with the 'id' parameter to the...

SQL Injection Vulnerability in NUCMS V1.1

NUCMS content management system is an open source website management system. NUCMS V1.1 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Enterprise Content Management System Monitor

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version Java 6 and Java 7 used by Enterprise Content Management System Monitor. These issues were disclosed as part of the IBM Java SDK updates in October 2016. Vulnerability Details CVEID: CVE-2016-5573 DESCRIPTION:...

Security Bulletin: Vulnerability in Open Source Apache Tomcat , Commons FileUpload affect IBM Enterprise Content Management System Monitor (CVE-2016-3092)

Summary Vulnerability in Open Source Apache Tomcat , Commons affect IBM Enterprise Content Management System Monitor Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component. By sendin...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and OpenSSL affect IBM FileNet System Monitor/IBM Enterprise Content Management System

Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 & May 3, 2016 by the OpenSSL Project. OpenSSL is used by Enterprise Content Management System Monitor has addressed the applicable CVEs. There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and 7 that is...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Enterprise Content Management System Monitor

Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM Enterprise Content Management System Monitor has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2016-0703 DESCRIPTION: OpenSSL could allow a remote attacker to bypass...