CVE-2022-44088

ESPCMS P8.21120101 was discovered to contain a remote code execution RCE vulnerability in the component INPUTISDESCRIPTION...

flatCore 跨站脚本漏洞

flatCore is a lightweight content management system CMS based on PHP and SQLite. A cross-site scripting vulnerability exists in flatCore CMS version v2.1.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the Usernam...

Subrion CMS 跨站脚本漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extension plugins and more. A cross-site scripting vulnerability exists in Subrion CMS version v4.2.1. An attacker can exploit this vulnerability t...

Fedora: Security Advisory for drupal7 (FEDORA-2022-bf18450366)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-22818

MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter...

MKCMS SQL注入漏洞

MKCMS is a content management system. MKCMS V6.2 version exists SQL injection vulnerability, the vulnerability stems from its /ucenter/repass.php component name parameter allows attackers to achieve SQL injection...

MKCMS SQL注入漏洞

MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version V6.2, which stems from the verify parameter of its /ucenter/active.php component that allows an attacker to achieve SQL injection...

CVE-2021-38217

SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...

SEMCMS SQL注入漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which originates from a SQL injection issue in AntBlogCat.php...

JFinal SQL注入漏洞

JFinal is a Java language based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from vulnerability to SQL injection attacks via /admin/advicefeedback/list...

CVE-2022-39322

The CVE-2022-39322 entry affects the Keystone 6 ecosystem: @keystone-6/core prior to version 2.3.1, specifically 2.2.0 up to 2.3.0, is vulnerable to a field-level access-control bypass for multiselect fields. The vulnerability arises because field-level access control is not applied to multiselec...

Keystone 授权问题漏洞

Keystone is a powerful CMS designed to help you build and scale faster than any other Cms or application framework. An authorization issue vulnerability exists in versions of Keystone prior to 2.3.1, which stems from the fact that users who use field-level access controls are vulnerable to not...

CVE-2022-39322 @keystone-6/core vulnerable to field-level access-control bypass for multiselect field

@keystone-6/core is a core package for Keystone 6, a content management system for Node.js. Starting with version 2.2.0 and prior to version 2.3.1, users who expected their multiselect fields to use the field-level access control - if configured - are vulnerable to their field-level access contro...

CVE-2022-39315 Kirby CMS vulnerable to user enumeration in the brute force protection

Kirby is a Content Management System. Prior to versions 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, a user enumeration vulnerability affects all Kirby sites with user accounts unless Kirby's API and Panel are disabled in the config. It can only be exploited for targeted attacks because the attack does...

[SECURITY] Fedora 36 Update: drupal7-7.92-1.fc36

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Security Bulletin: Enterprise Content Management System Monitor is affected by vulnerability in Dojo [CVE-2021-23450]

Summary Vulnerability found in Dojo used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVE CVE-2021-23450. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: Dojo could allow a remote attacker to execute arbitrary...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created link...

WISA Smart Wing CMS 路径遍历漏洞

WISA Smart Wing CMS is a content management system from WISA Korea. A security vulnerability exists in WISA Smart Wing CMS. An attacker could exploit the vulnerability to execute malicious commands such as directory traversal...

UCMS 安全漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS version 1.6, which stems from a file inclusion in the template management module...

CVE-2022-35944

CVE-2022-35944 affects October CMS (Laravel-based). The flaw allows bypass of the Safe Mode cms.safe_mode when an attacker with admin Editor access crafts a request to inject PHP code into a CMS template. Patches exist in v2.2.34 and v3.0.66; no public exploit details are provided in the connecte...