CVE-2025-29093

File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component...

PT-2025-23811 · Unknown · Motivian Content Management System

Name of the Vulnerable Software and Affected Versions: Motivian Content Management System version 41.0.0 Description: The issue allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component. This is a result of a File Upload vulnerability. Recommendations: For Motivi...

PT-2025-23815 · Unknown · Motivian Content Management System

Name of the Vulnerable Software and Affected Versions: Motivian Content Management System version 41.0.0 Description: The issue allows a remote attacker to execute arbitrary code via the Marketing/Forms, Marketing/Offers, and Content/Pages components. This is a Cross Site Scripting vulnerability...

CVE-2025-29094

Cross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Marketing/Forms, Marketing/Offers and Content/Pages components...

CVE-2025-29093

CVE-2025-29093 affects Motivian Content Management System, v41.0.0, through the vulnerable component Content/Gallery/Images . The root cause is a File Upload weakness that allows remote attackers to upload arbitrary files, potentially enabling code execution. Evidence across connected docs includ...

CVE-2025-29094

CVE-2025-29094 describes a cross-site scripting vulnerability in Motivian Content Management System 41.0.0 that affects the components Marketing/Forms , Marketing/Offers , and Content/Pages . The underlying issue is a client-side XSS that could allow a remote attacker to execute arbitrary JavaScr...

CVE-2025-29094

Cross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Marketing/Forms, Marketing/Offers and Content/Pages components...

CVE-2025-29093

File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component...

phpwcms 代码问题漏洞

phpwcms is an open source web content management system from slackero open source. It is fast, easy to install and runs on any standard web server platform that supports PHP/MySQL. A security vulnerability exists in phpwcms 1.9.45 and 1.10.8 and earlier versions, which stems from an incorrect...

Marwal Infotech CMS 注入漏洞

Marwal Infotech CMS is a content management system from Marwal Infotech. An injection vulnerability exists in Marwal Infotech CMS version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /page.php...

Juzaweb CMS 安全漏洞

Juzaweb CMS is a content management system developed by Juzaweb Individual Developer based on the Laravel framework and Web platform. A security vulnerability exists in Juzaweb CMS 3.4.2 and earlier versions that stems from improper access control in the file /admin-cp/menus...

Blogbook 注入漏洞

Blogbook is a content management system project by Chaitak Gorai, an individual developer. Blogbook has an injection vulnerability that stems from a SQL injection in the parameter uid in the file /user.php...

Blogbook 注入漏洞

Blogbook is a content management system project by the individual developer Chaitak Gorai. Blogbook 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and earlier versions have an injection vulnerability that stems from SQL injection of the parameter postid in the file /admin/viewallposts.php...

Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware

A financially motivated threat actor has been observed exploiting a recently disclosed remote code execution flaw affecting the Craft Content Management System CMS to deploy multiple payloads, including a cryptocurrency miner, a loader dubbed Mimo Loader, and residential proxyware. The...

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Samsung MagicINFO 9 Server is a core component of the MagicINFO solution and is responsible for content management and scheduling functions. A path traversal vulnerability exists in Samsung MagicINFO 9 Server, which stems from an improperly restricted pathname, and can be exploited by an attacker...

The vulnerability of the Front End User Registration (sr_feuser_register) extension of the TYPO3 content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Front End User Registration srfeuserregister extension of the TYPO3 content management system is related to the use of a insecure direct link to an object IDOR. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Backup Plus (ns_backup) extension of the TYPO3 content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Backup Plus nsbackup extension of the TYPO3 content management system is related to errors in the access control for saved backup files and configurations. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

pixelimity 注入漏洞

pixelimity is pixelimity open source a content management system . pixelimity 1.0 version of an injection vulnerability , the vulnerability stems from the file /install/index.php parameter sitedescription in the wrong operation leads to SQL injection...

The vulnerability of the Front End User Registration (sr_feuser_register) extension of the TYPO3 content management system allows a hacker to execute arbitrary code.

The vulnerability of the Front End User Registration srfeuserregister extension of the TYPO3 content management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-48377

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions. Version 9.13.9 fixes the issue...