File upload vulnerability in QYKCMS version 4.3.2 (CNVD-2018-05664)

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS version 4.3.2 file upload vulnerability exists, the vulnerability stems from the content of the uploaded zip backup file is not filtered, the attacker can use the vulnerability to obtain webshe...

Stored Cross-Site Scripting Vulnerability at jeecms Modify Profile

jeecms is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with payment and financial settlement of the content management system. jeecms modified...

Code Execution Vulnerability in POCMS Program Version v3.2.0 Backend

POSCMS System is a content management system based on the CodeIgniter framework. A code execution vulnerability exists in the backend of POCMS program version v3.2.0, which can be exploited by an attacker to execute code and thus gain control of the server...

Arbitrary File Deletion Vulnerability in iZhanCMS Version v2.1

Love Station CMS is an open source and free CMS content management system. iZhanCMS v2.1 version exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete arbitrary files...

Code Execution Vulnerability in xyhcms v3.5

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. xyhcms v3.5 version of the code execution vulnerabilities , attackers can exploit the vulnerability to insert a sentence Trojan horse to obtain the website webshell...

Magento CMS APIs Cross-Site Request Forgery Vulnerability

Magento CMS is an open source PHP e-commerce content management system CMS of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions . A cross-site request forgery vulnerability exists in the Magento CMS APIs, which stems...

CwCms v1.8 Exists Arbitrary File Write Vulnerability

CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. CwCms v1.8 version of the existence of arbitrary file write vulnerability, the vulnerability is due to the system to write the content of the file and file path failed to effectively...

Code Execution Vulnerability in WANCMS v1.0

WANCMS is a content management system that uses php+mysql program source code. A code execution vulnerability exists in WANCMS v1.0 due to the system failing to effectively filter some input parameter values. An attacker can exploit this vulnerability to upload a Trojan horse file and obtain a...

Yab Quarx 2.4.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications 1. Introduction Vendor : Yab Affected Product : Quarx through 2.4.3 Fixed in : Quarx 2.4.5 and 2.4.6 Vendor Website : https://quarxcms.com/ Vulnerability Type : Persistent XSS Remote Exploitable : Yes CVE External Identifier : CVE-2018-7274 2...

Joomla Aist 2.0 Component - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Aist = 2.0 - SQL Injection Vendor Homepage: http://aist.bmstu.ru/ Software Link: http://aist.bmstu.ru/ Version: = 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5993 Exploit Author: Ihsan...

SQL Injection Vulnerability in CMS of Shanghai Seek Creative Technology Co.

Ltd. specializes in providing customers with high-end website planning, website construction, website design, brand network marketing and related Internet-based application services. A SQL injection vulnerability exists in the CMS of Shanghai Seek Creative Technology Co., Ltd, which can be...

Information leakage vulnerability in jeecms version 9.2

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

Epignosis eFront CMS Path Traversal Vulnerability

Epignosis eFront CMS is an online learning system with an Ajax interface from Epignosis, USA. The system allows you to create and manage courses with tools such as a content editor, file manager, and digital library. A path traversal vulnerability exists in Epignosis eFront CMS 3.6.15.4 and earli...

Visual Calendar SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. Visual Calendar is one of the visual calendar plug-in . A SQL injection vulnerability exists in Joomla! Visual Calendar version 3.1.3. A remote...

Arbitrary File Upload Vulnerability in UCMS

UCMS is a simple open source content management system. UCMS has an arbitrary file upload vulnerability that allows an attacker to log in to the background and upload arbitrary files to gain control of the web server...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2018-02621)

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site scripting vulnerability exists in CMS Made Simple CMSMS 2.2.5. The vulnerability can be exploited to conduct cross-site scripting attacks via the m1messages...

711cms V1.0.5 has a directory traversal vulnerability

711cms is the first open source cms for APP application market, pc station + wap station + APP native client three stations in one, to provide a complete APP application market construction, operation and promotion of one-stop solution. 711cms V1.0.5 version of the existence of directory traversa...

SQL Injection Vulnerability in CMS of Shenzhen Aipres Technology Co.

Ltd. is engaged in website construction, enterprise application software development, enterprise network brand integration of enterprise "brand" management one-stop solution. Ltd. building CMS there are SQL injection vulnerabilities, attackers can use the vulnerability to access or modify the...

YzmCMS_v3.6 Arbitrary File Deletion Vulnerability

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMSv3.6 has an arbitrary file deletion vulnerability. Attackers by cracking the background default account password , construct URL...

Zenario v7.6 CMS - SQL Injection Web Vulnerability

Document Title: =============== Zenario v7.6 CMS - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2043 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5960 CVE-ID: ======= CVE-2018-5960 Release Date: ===========...