Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-03389)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.2.16. The vulnerability can be exploited by an attacker to perform unauthorized operatio...

Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-03386)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS versions 4.1.18 and 4.2.16. A remote attacker can exploit this vulnerability to delete users with...

Arbitrary File Deletion Vulnerability in CWCMS admin/cw_ad.php Page

CWCMS is an enterprise website management system. An arbitrary file deletion vulnerability exists in the CWCMS admin/cwad.php page. An attacker can exploit this vulnerability to delete arbitrary files from the website...

iBaseCMS 1.23 SQL Injection / File Upload Vulnerabilities

Exploit for php platform in category web applications Title: iBaseCMS - SQl Injection / File Upload / Remote Code Execution via arbitrary file upload Credit: Bilal KARDADOU Vendor: iOnline Vendor URL: http://www.ibasecms.nl Product: iBaseCMS "CONTENT MANAGEMENT SYSTEM" Google Dork: N/A --SQL...

iBaseCMS 1.23 SQL Injection / File Upload

Title: iBaseCMS - SQl Injection / File Upload / Remote Code Execution via arbitrary file upload Credit: Bilal KARDADOU Vendor: iOnline Vendor URL: http://www.ibasecms.nl Product: iBaseCMS "CONTENT MANAGEMENT SYSTEM" Google Dork: N/A --SQL Injection/Exploit--...

MBLS Flex CMS 0.7.2 SQL Injection / Cross Site Scripting

Title: SQL injection & Cross-site scripting in CMS Flex Credit: Bilal KARDADOU Vulnerability: SQL injection & Cross-Site scripting Vulnerable version: Flex Version 0.7.2 Vendor: MBL Solutions Ltd Vendor URL: http://www.mblsolutions.co.uk/ Product: FLEX CMS "THE INTUITIVE CONTENT MANAGEMENT SYSTEM...

Elefant CMS 1.3.12-RC Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version https://github.com/jbroadway/elefant/releases/tag/ Link: elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability CSRF Type: Remote Yes Exploitable:...

dotCMS 3.6.1 Blind Boolean SQL Injection

Blind Boolean SQL Injection in dotCMS = 3.6.1 CVE-2017-5344 Product Description dotCMS is a scalable, java based, open source content management system CMS that has been designed to manage and deliver personalized, permission based content experiences across multiple channels. dotCMS can serve as...

Ionize Arbitrary Code Execution Vulnerability

ionize is a CMS system developed using CodeIgniter. A cross-site scripting vulnerability exists in Ionize version 1.0.8 due to the program failing to adequately validate user-supplied input. An attacker can exploit this vulnerability to execute arbitrary HTML and script code in a user's browser...

Cross-site scripting vulnerability in 'index.php' page of DM website builder system

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. A cross-site scripting vulnerability exists in the 'index.php' page of the DM website builder system. The program fails to filter...

CSRF vulnerability in icms backend

iCMS is an efficient content management system for small and medium-sized websites. A csrf vulnerability exists in the latest version of iCMS. Because the token is not validated in the /app/admincp/account.app.php dosave operation, an attacker can modify the administrator account password by...

Joomla! information disclosure vulnerability (CNVD-2016-13020)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A security vulnerability exists in the templates/beez3/html/comcontent/article/default.php file in versions of Joomla! prior to 3.6.5, which stems...

WHMCS Addon VMPanel 2.7.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...

VMPanel 2.7.4 - SQL Injection Web Vulnerability

Exploit for php platform in category web applications ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...

VMPanel 2.7.4 SQL Injection

===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...

[SECURITY] Fedora 25 Update: drupal7-7.52-1.fc25

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 23 Update: drupal7-7.52-1.fc23

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

ChatNow 1.1 SQL Injection

===================================================== Exploit Title : ChatNow 1.1 - SQL Injection Web Vulnerability Date Discovered : 2016-11-17 Affected Products: chatNow v1.1 - Content Management System Exploitation Technique: Remote Severity Level: High Tested OS : Windows 10...

NodCMS Installer Client-Side Cross Site Scripting

===================================================== Exploit Title : NodCMS Installer - Multiples Cross Site Web Vulnerability Date Discovered : 2016-11-10 Affected Products: NodCMS Installer - Content Management System Exploitation Technique: Remote Severity Level: Low Tested OS : Windows 10...

LEPTON 2.2.2 - Remote Code Execution

LEPTON 2.2.2 - Remote Code Execution Security Advisory - Curesec Research Team 1. Introduction Affected Product: LEPTON 2.2.2 stable Fixed in: 2.3.0 Fixed Version Link: http://www.lepton-cms.org/posts/important-lepton-2.3.0-101.php Vendor Website: http://www.lepton-cms.org/ Vulnerability Type: Co...