PT-2022-18546 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS version 1.0 Description: A critical issue has been found, affecting an unknown functionality of the file /dashboard/settings, leading to improper authentication. The attack can be launched remotely...

Company Website CMS 代码问题漏洞

Company Website CMS is a company website/CMS by Torrahclef Personal Developer. Company Website CMS suffers from a code issue vulnerability that stems from some unknown functionality of /dashboard/add-portfolio.php being affected, where manipulation of the parameter ufile can lead to unrestricted...

Company Website CMS 代码问题漏洞

Company Website CMS is a company website/CMS by Torrahclef Individual Developer. Company Website CMS suffers from a code issue vulnerability that stems from an unrestricted upload due to the manipulation of the parameter ufile in an unknown portion of code in its add blog content component...

Company Website CMS 访问控制错误漏洞

Company Website CMS is a company website/CMS by Torrahclef Individual Developer. Company Website CMS 1.0 suffers from an Access Control Error vulnerability that stems from an unknown function of the file /dashboard/settings being affected, resulting in incorrect authentication and an attack that...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

UCMS 代码问题漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS version 1.6, which originates from an arbitrary file upload vulnerability in the /ucms-v1.6/ucms/sadmin/file PHP file...

SQL Injection Vulnerability in MCms of Jiangxi Minsoft Technology Co. Ltd (CNVD-2022-62417)

MCms is a java-based development of a lightweight open source content management system . Jiangxi Minsoft Technology Co., Ltd MCms SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

PT-2022-22819 · Ucms · Ucms

Name of the Vulnerable Software and Affected Versions: UCMS version 1.6 Description: The issue allows for arbitrary file upload via the ucms/sadmin/file PHP file. Recommendations: For version 1.6, consider restricting access to the ucms/sadmin/file PHP file to minimize the risk of exploitation...

The vulnerability of the Drupal CMS system, related to improper code generation, allows attackers to execute arbitrary code.

The vulnerability of the Drupal CMS system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Bolt CMS 输入验证错误漏洞

Bolt CMS is an open source PHP-based content management system for the BOLT community. An input validation error vulnerability exists in Bolt CMS version 5.1.7, which stems from the folder name parameter being found to have incorrect input validation, allowing an attacker to perform directory...

October CMS Competitive Conditions Issue Vulnerability

October CMS is an open source content management system CMS based on PHP and Laravel web application framework. October CMS suffers from a Competing Conditions Issue vulnerability. The vulnerability stems from improper handling of concurrent access when concurrent code requires mutually exclusive...

Textpattern CMS Information Disclosure Vulnerability

Textpattern CMS is a Php-based content management system from the Textpattern team. An information disclosure vulnerability exists in Textpattern CMS v4.8.7 and prior versions, which stems from the application transmitting cookies used in HTTPS session transfers in plaintext. An attacker can...

silverstripe framework 授权问题漏洞

silverstripe framework is a CMS web framework. A security vulnerability exists in silverstripe framework version 1.10 and earlier versions. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

PortlandLabs Concrete Cms Remote Code Execution Vulnerability

PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. A remote code execution vulnerability exists in PortlandLabs Concrete Cms, which stems from the ability to download zip files over HTTP and execute from those zip files, which could be...

WUZHI CMS 跨站脚本漏洞

WUZHI CMS is a set of five fingers WUZHI company based on PHP and MySQL open source content management system CMS. A security vulnerability exists in WUZHI CMS version v4.1.0. A remote attacker can exploit this vulnerability to execute arbitrary web script or HTML via the imgurl parameter...

EyouCms Cross-Site Scripting Vulnerability (CNVD-2022-62185)

eyoucms is a content management system. A cross-site scripting vulnerability exists in the eyoucms login page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious...

CVE-2022-30118

Title for CVE: XSS in /dashboard/system/express/entities/forms/savecontrol/GUID: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can...

Elefant CMS Cross-Site Scripting Vulnerability (CNVD-2022-58244)

Elefant CMS is a simple PHP content management system and web framework by Canadian John de Plume, an individual developer. A security vulnerability exists in Elefant CMS version 1.3.12-RC, which can be exploited by attackers to perform cross-site scripting attacks...

Elefant CMS Code Issues Vulnerabilities

Elefant CMS is a simple PHP content management system and web framework by Canadian John de Plume, an individual developer. A security vulnerability exists in Elefant CMS version 1.3.12-RC, which stems from unknown functionality in file/filemanager/upload/drop for component file uploads. A remote...

Unioncms Cross-Site Scripting Vulnerability

Unioncms is a content management system of China Union Capital Network Technology Unioncms Company. Unioncms v1.0.13 version of a cross-site scripting vulnerability, an attacker can exploit the vulnerability in the client to execute JavaScript code...