Security Bulletin:Multiple vulnerabilities in IBM Java SDK affect IBM FileNet System Monitor/IBM Enterprise Content Management System Monitor(CVE-2016-0494,CVE-2016-0483,CVE-2015-8126,CVE-2015-8472,CVE-2016-0402,CVE-2016-0448,CVE-2015-8540,CVE-2015-7981)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and 7 that is used by IBM FileNet System Monitor/IBM Enterprise Content Management System Monitor.These issues were disclosed as part of the IBM Java SDK updates in January 2016 Vulnerability Details CVEID:...

MetInfo 6.0.0 Has Arbitrary File Read Vulnerability

MetInfo is a content management system developed using PHP and Mysql. MetInfo 6.0.0 suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to obtain sensitive information on a website...

PT-2018-17588 · Unknown · Cms Server +1

Name of the Vulnerable Software and Affected Versions: UCMBD Server versions 10.20 through 11.0 CMS Server version 2018.05 BACKGROUND Description: A remote Cross-site Request forgery CSRF potential has been identified, which could allow for remote unsafe deserialization and cross-site request...

Online Store System CMS SQL Injection Vulnerability

Online Store System CMS is an online management system. A SQL injection vulnerability exists in Online Store System CMS, which can be exploited by an attacker to execute arbitrary SQL commands...

SQL Injection Vulnerability in NUCMS V1.1

NUCMS content management system is a domestic outstanding open source website management system , based on PHP MySQL technology development. Developed using the domestic famous open source PHP framework , using Jquery and CSS3 interface design , compatible with IE8 and above mainstream browser...

OEcms 3.1 Cross Site Scripting

Title: ======= OEcms v3.1 - Reflected Cross-Site Scripting Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CMS...

YzmCMS User Traversal Vulnerability

YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A security vulnerability exists in the password retrieval function of the index.php/member/reset/resetemail.html page in YzmCMS version 3.2 to 3.7, which originates from the validity period of the...

CScms Cross-Site Request Forgery Vulnerability

CScms is a content management system CMS developed on a CI framework. A cross-site scripting vulnerability exists in the plugins/sys/admin/Sys.php file in CScms version 4.1. A remote attacker can exploit this vulnerability to change the administrator name and password with the help of the...

PT-2018-17586 · Micro Focus · Hp Universal Cmdb +2

Name of the Vulnerable Software and Affected Versions: Micro Focus Universal CMDB versions 10.20 through 10.33, 11.0 Micro Focus CMS versions 4.10 through 4.15.1 Micro Focus UCMDB Browser versions 4.10 through 4.15.1 Description: The issue is related to Cross-Site Scripting XSS, which could be...

Joomla! security bypass vulnerability (CNVD-2018-15194)

Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A security vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the program's failure to perform adequate testing. Th...

BaserCMS Unlimited File Upload Vulnerability

baserCMS is an enterprise-level content management system CMS. A security vulnerability exists in baserCMS version 4.1.0.1 and earlier and version 3.0.15 and earlier. A remote attacker can exploit the vulnerability to upload arbitrary files...

Zenar Content Management System Cross Site Scripting

Exploit Title: Zenar Content Management System - Cross-Site Scripting Software Link: https://zenar.io/ Dork: N/A Author: Berk Dusunur Tested Website: http://demo.zenar.io Date: 2018-05-20 Category: Web App PoC GET Request: POST /zenario/ajax.php?methodcall=refreshPlugin&inIframe=true HTTP/1.1 Hos...

Zenar Content Management System - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Zenar Content Management System - Cross-Site Scripting Software Link: https://zenar.io/ Dork: N/A Author: Berk Dusunur Tested Website: http://demo.zenar.io Category: Web App PoC GET Request: POST...

Zenar Content Management System - Cross-Site Scripting

Zenar Content Management System - Cross-Site Scripting Exploit Title: Zenar Content Management System - Cross-Site Scripting Software Link: https://zenar.io/ Dork: N/A Author: Berk Dusunur Tested Website: http://demo.zenar.io Date: 2018-05-20 Category: Web App PoC GET Request: POST...

Monstra CMS 3.0.4 - Cross-Site Scripting (2)

Monstra CMS 3.0.4 - Cross-Site Scripting 2 Exploit Title: Monstra CMS 3.0.4 - Cross-Site Scripting Date: 2018-05-17 Exploit Author: Berk Dusunur Vendor Homepage: https://monstra.org Software Link: https://monstra.org Version: before 3.0.4 Tested on: Pardus / Win10 AppServer Proof Of Concept Monst...

DOM-type cross-site scripting vulnerabilities in the front-end of Xingyunhai CMS (XYHcms)

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. Xing Yunhai CMS XYHcms front-end DOM-type cross-site scripting vulnerabilities. Attackers can use the vulnerability to insert js code in the packet to obtain user cookies and other information...

Monstra CMS Cross Site Scripting

Exploit Title: Monstra CMS 3.0.4 - Cross-Site Scripting Date: 2018-05-17 Exploit Author: Berk Dusunur Vendor Homepage: https://monstra.org Software Link: https://monstra.org Version: before 3.0.4 Tested on: Pardus / Win10 AppServer Proof Of Concept Monstra is a modern and lightweight Content...

e107 Cross-Site Request Forgery Vulnerability (CNVD-2018-09821)

e107 is an open source, free and PHP and MySQL based Content Management System CMS developed by the e107 team. The system supports a variety of plug-ins and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. A cross-site request forgery...

SQL Injection Vulnerability in Jinbao Technology's CMS Website Building System

Shanghai Jinbao Network Technology Co., Ltd. is a set of website construction, SEO optimization, network promotion, Shanghai website production, Shanghai SEO optimization, Shanghai network optimization, and many other network services as one of the integrated service-oriented professional network...

[SECURITY] Fedora 27 Update: drupal7-7.59-1.fc27

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...