WBCE CMS SQL注入漏洞

WBCE CMS is an open source content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in wbce cms, which stems from the vulnerability of wbce cms to improper neutralization of special elements used in SQL commands...

b2evolution Code Execution Vulnerability

b2evolution is a community content management system based on PHP and MySQL. A security vulnerability exists in b2evolution CMS v7.2.3, which can be exploited by an attacker to execute arbitrary code via the parameter cfqueryparam in the user login section...

Kentico Cross-Site Scripting Vulnerability (CNVD-2022-06913)

Kentico is an ASP.NET-based content management system CMS from Kentico, Inc. A security vulnerability exists in Kentico Xperience CMS, which stems from the fact that Kentico Xperience CMS version 13.0 13.0.43 is prone to a persistent cross-site scripting XSS vulnerability also known as stored or...

The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures for cleaning incoming data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

TuziCMS has an unspecified vulnerability

TuziCMS rabbit CMS is a PHP and MySQL based content management system CMS for enterprises. a security vulnerability exists in TuziCMS version v2.0.6, which stems from the id parameter in AppManageControllerDownloadController.class.php. No detailed vulnerability details are available at this time...

TaoCMS SQL Injection Vulnerability

TaoCMS is a micro Cms Content Management System in China.TaoCMS is vulnerable to SQL injection and no details of the vulnerability are provided...

b2evolution 跨站请求伪造漏洞

b2evolution is a PHP and MySQL-based community content management system. b2evolution CMS v7.2.3 is vulnerable due to a cross-site request forgery CSRF contained in the user login page. An attacker could exploit this vulnerability to elevate privileges...

TaoCMS SQL Injection Vulnerability (CNVD-2021-94813)

TaoCMS is a micro Cms Content Management System in China.TaoCMS is vulnerable to SQL injection and no details of the vulnerability are provided...

TaoCMS Cross-Site Scripting Vulnerability

Taocms is a micro Cms Content Management System in China. taocms has a cross-site scripting vulnerability, no details of the vulnerability are provided at this time...

The vulnerability of the Adobe Experience Manager content and media management system, related to authentication errors, allows a perpetrator to access confidential information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

Taocms SQL注入漏洞

TaoCMS is a micro Cms Content Management System in China.TaoCMS is vulnerable to SQL injection and no details of the vulnerability are provided...

The vulnerability of the DNN CMS system, related to insufficiently secure data encryption, allows attackers to gain unauthorized access to protected information.

The vulnerability of the DNN CMS system is related to insufficiently secure data encryption. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

baserCMS OS Command Injection Vulnerability

baserCMS is an enterprise content management system CMS from the baserCMS Basercms team. baserCMS's management system is vulnerable to operating system command injection, which could be exploited by an attacker with upload file privileges to upload crafted zip files that could execute arbitrary...

CVE-2021-41279

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...

Path traversal

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...

CVE-2021-41279

CVE-2021-41279 affects baserCMS; a path traversal vulnerability exists in the upload handling where users with upload privileges can upload crafted zip files to traverse host filesystem. Affected versions prior to the fix allow this, with impact described as path traversal on the host OS. Remedia...

CVE-2021-41279 Zip Slip Vulnerability in BaserCMS

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the...

PortlandLabs Concrete CMS Elevation of Privilege Vulnerability

PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. PortlandLabs Concrete CMS is vulnerable to an elevation of privilege vulnerability that could be exploited by an attacker to elevate privileges from editor to administrator...

Kirby 跨站脚本漏洞

Kirby is a file-based content management system CMS. Kirby suffers from a cross-site scripting vulnerability that stems from the product's failure to validate input data, which could be exploited by attackers to execute client-side code...

EyouCms SQL Injection Vulnerability

EyouCms is a free + open source enterprise content management system based on the TP5.0 framework as the core development, focusing on the needs of enterprise building users. A SQL injection vulnerability exists in index.php in EyouCms version 1.4.7. An attacker can exploit this vulnerability by...