LaraCms Cross-Site Scripting Vulnerability (CNVD-2021-83574)

LaraCms is a modern content management system in China. version 1.0.1 of LaraCMS contains a cross-site scripting vulnerability that can be exploited by attackers to execute arbitrary web scripts or HTML via specially crafted loads in the content editor...

ZZCMS subzs.php component SQL injection vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to SQL injection, which stems from the lack of effective filtering and escaping of SQL statements in the subzs.php component. An attacker could use this vulnerability to execute illegal SQL...

ZZCMS SQL Injection Vulnerability (CNVD-2021-103656)

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of external input SQL statements in the dlid parameter on the application's /dl/dlprint.php page. An attacker could use...

CVE-2020-19959

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendmail.php page cookie...

FlameCMS SQL Injection Vulnerability

FlameCMS is an open source PHP-based content management system CMS. A SQL injection vulnerability exists in FlameCMS version 3.3.5. An attacker can exploit this vulnerability to cause SQL injection with the help of the id parameter in masterarticle.php...

S-CMS 代码问题漏洞

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS 3.0 version of the /api/notify.php exists XML external entity injection vulnerability. An attacker can use this vulnerability to read arbitrary files...

PHPFusion Remote Code Execution Vulnerability

PHPFusion is a lightweight open source content management system. A remote code execution vulnerability exists in PHPFusion version 9.03.110. The vulnerability can be exploited to achieve remote code execution by inserting malicious php code or php files into a zip file and uploading it to the...

Portlandlabs Concrete5 server-side request forgery vulnerability

Portlandlabs Concrete5 is an open source content management system CMS from PortlandLabs, U.S. Portlandlabs Concrete5 server-side request forgery vulnerability can be exploited by attackers to retrieve HTTP and FTP files from internal server networks by inserting internal addresses...

Maccms Cross-Site Scripting Vulnerability (CNVD-2021-88955)

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Mccms10, which stems from the fact that the nickname in the editing function under the Member module of the product fails to properly validate user input data. An attacker c...

Subrion SQL Injection Vulnerability

Subrion is a powerful and easy-to-use PHP content management system with powerful features such as full-source editing, per-page permissions, user activity monitoring, etc. A SQL injection vulnerability exists in visual-mode in Subrion version 4.2.1. An attacker can use this vulnerability to obta...

Maccms Cross-site Request Forgery Vulnerability (CNVD-2021-88953)

Maccms is a PHP-based content management system CMS for film and television. A cross-site request forgery vulnerability exists in Macmms 10, which stems from the failure of the admin.php/admin/type/info.html page in the product to verify that requests originate from trusted users. An attacker cou...

CVE-2021-41947

A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode...

CVE-2021-41126

CVE-2021-41126 affects October CMS (built on Laravel). The issue allows an administrator account that was previously deleted to still sign in to the backend when using October CMS v2.0. This vulnerability is addressed by upgrading the october/october package to v2.1.12. The available connected so...

CVE-2021-41114

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that TYPO3 CMS is susceptible to host spoofing due to improper validation of the HTTP Host header. TYPO3 uses the HTTP Host header, for example, to generate absolute URLs during the...

CVE-2021-41114

TYPO3 CMS is vulnerable to host header spoofing due to improper validation of the HTTP Host header. The regression in TYPO3 v11 reintroduced the issue after a previously mitigated design (trustedHostsPattern) was not evaluated. The CVE-2021-41114 entry describes host spoofing during frontend rend...

Maccms 跨站脚本漏洞

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Macmms 10, which stems from a failure to properly handle data for the typeen parameter in the product. An attacker could obtain an administrator cookie and escalate privileg...

Fedora: Security Advisory for drupal7 (FEDORA-2021-0c013f520c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GitLab Enterprise Edition 安全特征问题漏洞

GitLab Enterprise Edition is a content management system GitLab is a self-hosted Git version control system project repository application developed by GitLab, Inc. using Ruby on Rails. The program can be used to access the project's file content, commit history, bug list, etc.. A security...

UCMS 跨站脚本漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS, which originates from a stored cross-site scripting XSS vulnerability in ucms index.php. An attacker can exploit this vulnerability to execute client-side code...

Unspecified Vulnerability in PortlandLabs Concrete CMS (CNVD-2021-76077)

PortlandLabs Concrete Cms is a team-oriented open source content management system for the United States PortlandLabs . A security vulnerability exists in PortlandLabs Concrete CMS 8.5.5 and earlier, which stems from an "SVG Sanitizer" bypass issue with the program. No details of the...