SEMCMS SQL Injection Vulnerability (CNVD-2024-23136)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS 4.8 and earlier versions suffer from a SQL injection vulnerability, which stems from the application's lack of validation of external input SQL statements, and can be exploited by attackers to...

PT-2024-25783 · Unknown · Jin Fang Times Content Management System

Name of the Vulnerable Software and Affected Versions: Jin Fang Times Content Management System version 3.2.3 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter. Recommendations: For Jin Fang Times Content Management System...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology CmsEasy. A security vulnerability exists in CmsEasy version v7.7.7.9. An attacker can exploit the vulnerability to read arbitrary files...

Desdev DedeCMS 跨站请求伪造漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...

Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...

YzmCMS 安全漏洞

Yzmcms is an open source CMS Content Management System by the individual developer of Yzmcms. A security vulnerability exists in YzmCMS version 7.0. An attacker exploited the vulnerability to run arbitrary code via advertisement management, rotation management and system settings...

Kliqqi 安全漏洞

Kliqqi is a Content Management System CMS. A security vulnerability exists in Kliqqi-CMS version 2.0.2, which originates from a SQL injection vulnerability in the file loaddata.php...

OneThink 安全漏洞

OneThink is an open source content management framework. A security vulnerability exists in OneThink version v.1.1, which stems from an arbitrary code execution vulnerability in the AddonsController.class.php component...

Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS...

CVE-2024-30890

Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categories.php component...

BOSSCMS 安全漏洞

Wenzhou Huoyin Information Technology BossCMS is a content management system based on the MySQL architecture of the self-developed PHP framework by Wenzhou Huoyin Information Technology Wenzhou, China. A security vulnerability exists in BOSSCMS v3.10, which is caused by a cross-site scripting XSS...

WonderCMS ADMIN LOGIN URL Parameter Cross-Site Scripting Vulnerability

WonderCMS is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in WonderCMS v3.4.3, which stems from the lack of effective filtering and escaping of user-supplied data in the ADMIN LOGIN URL parameter of the Settings section, which can be exploite...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

JIZHICMS 安全漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from China's Extreme Networks Technology. A security vulnerability exists in JIZHICMS version 2.5, which stems from the presence of a file upload vulnerability...

emlog 跨站脚本漏洞

emlog is a PHP and MySQL based CMS website builder by emlog's individual developers. A cross-site scripting vulnerability exists in emlog version 2.2.10. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

Desdev DedeCMS SQL注入漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. DedeCMS 5.7.112-UTF8 has a SQL injection...

Xibo 安全漏洞

Xibo is an open source content management system from Xibo Digital Signage. A security vulnerability exists in Xibo that originates from a session hijacking via token exposure on a session page...

The Essential Tools and Plugins for WordPress Development

By Owais Sultan WordPress, a widely used content management system, owes a great deal of its flexibility to plugins. These small… This is a post from HackRead.com Read the original post: The Essential Tools and Plugins for WordPress Development...

CVE-2024-30262

Contao CVE-2024-30262: In versions prior to 4.13.40, when a frontend member changes their password (in Personal Data or Password Lost modules), associated remember-me tokens are not cleared, allowing ongoing access if a token was compromised. The issue is fixed in Contao 4.13.40. A recommended wo...