Code Execution Vulnerability in the Backend of POSCMS V3.2.18 Build 2018-03-26 Free Edition

POSCMS is an open source cross-platform web content management system developed by Php+Mysql. A code execution vulnerability exists in the backend of POSCMS V3.2.18 Build 2018-03-26 Free Edition. The vulnerability is due to improper filtering of user input in the backend, allowing an attacker to...

Multiple Vulnerabilities in OTCMS Version 3.20

OTCMS is an article-based web content management system CMS. Cross-site scripting, absolute path disclosure, and SQL injection vulnerabilities exist in OTCMS version 3.20. A remote attacker can inject malicious web script or HTML by adding keywords or links to articles, and then exploit the...

C5Scan - Vulnerability Scanner And Information Gatherer For The Concrete5 CMS

Vulnerability scanner and information gatherer for the Concrete5 CMS. Is a little out of date presently pending a refactor. concrete5 is an open-source content management system CMS for publishing content on the World Wide Web and intranets. concrete5 is designed for ease of use, for users with a...

GetSimple CMS 3.3.13 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: GetSimple CMS 3.3.13 - Cross Site Scripting Vulnerability Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://get-simple.info/ Software Link: http://get-simple.info/download/ Affected...

GetSimple CMS 3.3.13 - Cross-Site Scripting

GetSimple CMS 3.3.13 - Cross-Site Scripting Exploit Title: GetSimple CMS 3.3.13 - Cross Site Scripting Vulnerability Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://get-simple.info/ Software Link:...

[SECURITY] Fedora 28 Update: drupal7-7.58-1.fc28

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

GetSimple CMS Cross-Site Scripting Vulnerability

Cagintranet Networks GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in the...

OpenCMS 10.5.3 Cross Site Request Forgery

Exploit Title: OpenCMS 10.5.3 Multiple Cross Site Request Forgery Vulnerabilities Injection Google Dork: N/A Date: 02-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://www.opencms.org/en/ Software Link:...

SQL Injection Vulnerability in CMS, a Personal Card Issuing Platform Program

Personal card issuance platform program source code is a PHP + MySQL development of card issuance platform source code. A SQL injection vulnerability exists in the Personal Card Issuing Platform program CMS. The vulnerability stems from the program's failure to perform effective filtering. An...

Debian DLA-1325-1 : drupal7 security update (Drupalgeddon 2)

Jasper Mattsson found a remote code execution vulnerability in the Drupal content management system. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised. For further information please refer to the...

OTCMS cross-site scripting vulnerability (CNVD-2018-06876)

OTCMS is an article-based web content management system CMS. A cross-site scripting vulnerability exists in OTCMS version 3.20. A remote attacker can inject malicious web script or HTML by adding keywords or links to articles...

SQL Injection Vulnerability in ZZCMS Version 8.2

Webmaster Merchants Content Management System ZZCMS developed by the ZZCMS team, into the database optimization, content caching, AJAX and other technologies, open source, independent functional modules, to facilitate secondary development. There is a SQL injection vulnerability in ZZCMS version...

CVE-2018-8811

OpenCMS 10.5.3 is affected by a CSRF vulnerability in system/workplace/admin/accounts/user_role.jsp that can lead to privilege escalation by hijacking an admin session. Exploitation requires the attacker to have a CMS account with content-manager privileges; multiple public exploits (Exploit-DB, ...

Th3Inspector - Tool for Information Gathering

Tool For Information Gathering. Usage Short Form| Long Form| Description ---|---|--- -i| --info| Website Information -n| --number| Phone Number Information -mx| --mailserver| Find IP Address And E-mail Server -w| --whois| Domain Whois Lookup -l| --location| Find Website/IP Address Location -c|...

CVE-2018-7893

CMS Made Simple CMSMS 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter...

QCMS cross-site scripting vulnerability (CNVD-2018-06392)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in QCMS version 3.0. A remote attacker can exploit this vulnerability by sending the 'title' parameter to the /guest/index.html URI to obtain a user cookie...

Arbitrary File Upload Vulnerability in CLTPHP Version 5.5.3

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. CLTPHP version 5.5.3 suffers from an arbitrary file upload vulnerability, which allows an attacker to directly upload malicious scripts without any privileges and control the web server...

Arbitrary File Deletion Vulnerability in CLTPHP Version 5.5.3

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. An arbitrary file deletion vulnerability exists in CLTPHP version 5.5.3, which can be exploited by attackers to delete arbitrary files...

SQL Injection Vulnerability in iCMS v7.0.7 search.admincp.php Page

iCMS is a free, clean, efficient, and useful PHP content management system. iCMS v7.0.7 suffers from a SQL injection vulnerability in the search.admincp.php page, which originates from the orderby parameter being brought into the database for execution without any processing. An attacker can...

XSS vulnerability in metinfo version 6.0.0

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo version 6.0.0. The vulnerability occurs because app/system/feedback/web/feedback.class.php fails to properly handle input data. An attacker can exploit this vulnerabili...