zbzcms 跨站脚本漏洞

zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms Inc. zbzcms version 1.0 has a cross-site scripting vulnerability, no detailed vulnerability details are currently available...

zbzcms安全漏洞

zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file deletion vulnerability, no detailed vulnerability details are provided at this time...

中天网络科技 OFCMS 安全漏洞

Zhongtian Network Technology OFCMS is a content management system CMS developed by China Zhongtian Network Technology Company using Java language. A security vulnerability exists in OFCMS v1.1.4, which originates from an insecure privilege configured in the userid parameter in...

PHPCMS SQL Injection Vulnerability (CNVD-2022-43217)

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules for news, images, downloads, information, products, etc. A security vulnerability exists in PHPCMS v1.0, which stems from the category parameter in categorymenu.php. No detailed vulnerabilit...

TPCMS Cross-Site Scripting Vulnerability (CVE-2022-27441)

TPCMS is a content management system.A cross-site scripting vulnerability exists in TPCMS version 3.2, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute arbitrary web script or HTML by injecting a...

ImpressCMS SQL Injection Vulnerability (CNVD-2022-30798)

A SQL injection vulnerability exists in ImpressCMS, a database MySQL-driven, modular content management system, which can be exploited by attackers to read and modify sensitive information from the database used by the application...

Remote code execution in Subrion

Subrion is an open source php content management system. A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

GHSA-G54X-29XV-58H5 Remote code execution in Subrion

Subrion is an open source php content management system. A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

Totaljs Cross-Site Scripting Vulnerability (CNVD-2022-82269)

Total Avengers Totaljs Framework is a Javascript-based code base for building web, desktop, service or IoT applications from Total Avengers, Slovakia. The application is similar to PHPs Laravel, Pythons Django, ASP.NET MVC for building Node applications.A cross-site scripting vulnerability exists...

CVE-2022-27441

A stored cross-site scripting XSS vulnerability in TPCMS v3.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Phone text box...

TPCMS 跨站脚本漏洞

TPCMS is a content management system.A cross-site scripting vulnerability exists in TPCMS version 3.2, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute arbitrary web script or HTML by injecting a...

Pagekit SQL注入漏洞

Pagekit is a modular, lightweight CMS content management system. pagekit has a SQL injection vulnerability, which can be exploited by attackers to execute illegal SQL commands to steal sensitive data from the database...

BlueCMS SQL Injection Vulnerability (CNVD-2022-25774)

BlueCMS is a PHP and MySQL-based content management system CMS. a SQL injection vulnerability exists in BlueCMS version 1.6. The vulnerability can be exploited by remote attackers to execute SQL commands with the help of the 'userid' parameter...

CSZ CMS SQL Injection Vulnerability (CNVD-2022-30782)

CSZ CMS is a PHP-based open-source content management system CMS.A SQL injection vulnerability exists in CSZ CMS 1.2.9, which can be exploited by attackers via cszcms/controllers/Member.php...

CSZ CMS SQL Injection Vulnerability (CNVD-2022-30783)

CSZ CMS is a PHP-based open source content management system CMS. version 1.2.9 of CSZ CMS is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the fieldS and orderby parameters in endpoint/admin/export/getcsv/articledb, which can be used by...

WPanel 代码问题漏洞

WPanel is a CMS for building blogs, websites, and web applications. A security vulnerability exists in WPanel 4 4.3.1 and lower, which originates from uploading 1 dashboard avatar images, 2 post folder images, 3 page folder images, and 4 gallery folder images via malicious PHP files...

The-Secretary 安全漏洞

The-Secretary is a simple content management system by the Canadian mikaelstaer individual developer. The-Secretary 2.5 suffers from a security vulnerability that could lead to an RCE via install.php...

Server side request forgery in C1 CMS

C1 CMS is an open-source, .NET based Content Management System CMS. Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery SSRF by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also...

CxuuCms Cross-Site Scripting Vulnerability (CNVD-2022-31818)

CxuuCms is an easy-to-use, PHP Mysql-based open source content management system. cross-site scripting vulnerability exists in CXUUCMS V3. No detailed vulnerability details are available...

Server-Side Request Forgery (SSRF)

C1 CMS is an open-source, .NET based Content Management System CMS. Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery SSRF by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also...