UCMS has an override access vulnerability

UCMS is a simple open source content management system. UCMS version 1.4.3 suffers from an override access vulnerability, which can be exploited by an attacker to override the right to modify, add, or delete administrator users...

BlackCat CMS Arbitrary PHP Code Execution Vulnerability

BlackCat CMS is a PHP5, HTML5 content management system. An arbitrary PHP code execution vulnerability exists in the backend/addons/install.php file in BlackCat CMS, which can be exploited by remote attackers to execute arbitrary PHP code via a ZIP archive containing the .php file...

BlackCat CMS Cross-Site Scripting Vulnerability (CNVD-2017-24888)

BlackCat CMS is a PHP5, HTML5 content management system. A cross-site scripting vulnerability exists in the backend/settings/ajaxsavesettings.php file in BlackCat CMS, which can be exploited by remote attackers via the site title or site footer fields...

SQL Injection Vulnerability in UCMS

UCMS is a simple open source content management system . UCMS version 1.4.3 SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2017-13778

Fiyo CMS 2.0.7 has XSS in dapur\apps\appconfig\sysconfig.php via the sitename parameter...

Smartwebsites SmartCMS Cross-Site Scripting Vulnerability

Smartwebsites SmartCMS is a Content Management System CMS from Smartwebsites Cyprus. The system provides online content management, user management and document management. A cross-site scripting vulnerability exists in Smartwebsites SmartCMS version 2. A remote attacker can exploit this...

SQL Injection Vulnerability in CMS ArticleAction.class.php Page

Fargo CMS is a marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the CMS ArticleAction.class.php page. The vulnerability is due to the system flag parameter does not filter the data submitted by the user, a remote attacker c...

Cross-site scripting vulnerability in CmsEasy frontend

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. A cross-site scripting vulnerability exists in the CmsEasy frontend, which can be exploited by attackers to execute arbitrary JavaScript code...

Philex CMS 0.2 Directory Traversal Vulnerability

Exploit for php platform in category web applications Title: ======= Philex CMS - Directory Traversal Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users...

SQL Injection Vulnerability in UCMS 'ajax.php' File

UCMS is a simple open source content management system. A SQL injection vulnerability exists in the UCMS 'ajax.php' file, which can be exploited by attackers to obtain sensitive information about the database...

Arbitrary code writing vulnerability in phpmywind cms

PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . An arbitrary code write vulnerability exists in phpmywind cms, which can be exploited by attackers to gain service privileges...

MetInfo System URL Redirection Vulnerability

MetInfo is a Content Management System CMS developed using PHP and Mysql. A redirection vulnerability exists in MetInfo 5.3.17 and earlier versions. An attacker constructs a malicious URI and induces the user to parse it, which can redirect the user to any WEB site for phishing attacks...

CVE-2016-6133

CVE-2016-6133 is an XSS vulnerability in Ektron Content Management System (pre-9.1.0.184SP3 / 9.1.0.184.3.127) where an attacker can inject arbitrary script via the rptStatus parameter in WorkArea/SelectUserGroup.aspx. Public details (PacketStorm) show affected version 9.10SP1 (build 9.1.0.184) a...

Joomla! Releases Security Update

Joomla! has released version 3.7.4 of its Content Management System CMS software to address several vulnerabilities. A remote attacker could exploit some of these vulnerabilities to take control of an affected website. US-CERT encourages users and administrators to review the Joomla! Security...

Tilde CMS 1.01 - Multiple Vulnerabilities

Tilde CMS 1.01 - Multiple Vulnerabilities Exploit Title: Tilde CMS 1.01 Multiple Vulnerabilities Date: July 7th, 2017 Exploit Authors: Paolo Forte, Raffaele Forte Vendor Homepage: http://www.tildenetwork.com/ Version: Tilde CMS 1.0.1 Tested on: Ubuntu 12.04, PHP 5.3.10 I. INTRODUCTION...

Henan Xuecheng Software Website Group Content Management System Exists SQL Injection Vulnerability

Henan Xuecheng Software Co., Ltd. website group content management system is a website building system. A SQL injection vulnerability exists in the content management system of Henan Xuecheng Software Co. The vulnerability exists in /cms/template/InfoShowDefault.js. An attacker can exploit the...

MetInfo cross-site scripting vulnerability (CNVD-2017-25435)

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo version 5.3.17. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via Client-IP or X-Forwarded-For HTTP packet headers...

XSS Vulnerability in X6CMS

X6CMS, the full name of Xiaoliu Website Content Management System. X6CMS is a fully functional marketing website management platform with PHP+MYSQL architecture. X6CMS has XSS vulnerability. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

CMS Made Simple Upload Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMSMS version...

CVE-2017-9609

Cross-site scripting XSS vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the maplanguage parameter to backend/pages/langsettings.php...