SQL Injection Vulnerability in TCCMS

TCCMS is a content management system . Its core framework TC, with a large amount of data , high concurrency , easy to expand and so on. TCCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

MuYuCMS suffers from SQL Injection Vulnerability

MuYuCMS is an emerging lightweight, public service content management system. MuYuCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

LavaLite 跨站脚本漏洞

Lavalite is an open source content management system developed using the Laravel framework. A cross-site scripting vulnerability exists in LavaLite version 5.8.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "menu link" feature...

MuYuCMS suffers from arbitrary file deletion vulnerability (CNVD-2021-51335)

MuYuCMS is an emerging lightweight, public service content management system. MuYuCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Joomla! input validation error vulnerability (CNVD-2021-53939)

is a set of forum components used in the Joomla! content management system. Joomla! is vulnerable to an input validation error in versions 2.5.0 to 3.9.27, which can be exploited by attackers to cause corruption in the usergroups table...

Command Execution Vulnerability in MuYuCMS

MuYuCMS based on Thinkphp development of a set of lightweight open source content management system, focusing on the company's enterprises, individual station owners to provide rapid construction of the station to provide solutions. MuYuCMS command execution vulnerability , an attacker can exploi...

PHP-Fusion cross-site scripting vulnerability (CNVD-2021-48511)

PHP-Fusion is a lightweight open source content management system. A reflective cross-site scripting vulnerability exists in /administration/theme.php in PHP-Fusion version 9.03.60, which can be exploited to execute arbitrary web script or HTML via the "Manage Theme" field...

PHP-Fusion cross-site scripting vulnerability (CNVD-2021-48512)

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in /administration/settingsregistration.php in PHP-Fusion version 9.03.60, which can be exploited to execute arbitrary web script or HTML via the "registration" field...

Unspecified Vulnerability in PHP-Fusion

PHP-Fusion is a Malaysian company PHP-Fusion open source lightweight content management system based on MySql and PHP . The system contains modules such as news, articles and forums. PHP-Fusion suffers from a security vulnerability that stems from a session cookie not being deleted when a user lo...

Command Execution Vulnerability in MuYuCMS (CNVD-2021-51821)

MuYuCMS based on Thinkphp development of a set of lightweight open source content management system, focusing on the company's enterprises, individual station owners to provide rapid construction of the station to provide solutions. MuYuCMS command execution vulnerability , an attacker can exploi...

LavaLite Cross-Site Scripting Vulnerability (CNVD-2021-48515)

Lavalite is an open source content management system developed using the Laravel framework. A stored cross-site scripting vulnerability exists in the /admin/roles/role component of LavaLite version 5.8.0, which can be exploited by an attacker to execute arbitrary Web script or HTML via the ""New"...

CVE-2020-36410

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Email address to receive notification of news submission" parameter under the "Options" module...

CVE-2020-36411

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Path for the pageimage tag:" or "Path for thumbnail field:" parameters under the "Content Editing Settings" module...

CVE-2020-36408

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module...

CVE-2021-32737 XSS Injection in Media Collection Title was possible

Sulu is an open-source PHP content management system based on the Symfony framework. In versions of Sulu prior to 1.6.41, it is possible for a logged in admin user to add a script injection cross-site-scripting in the collection title. The problem is patched in version 1.6.41. As a workaround, on...

CVE-2021-32737

Sulu (PHP CMS on Symfony) prior to 1.6.41 is vulnerable to cross-site scripting via the collection title when performed by a logged-in admin. The issue stems from improper handling/validation of input in the collection title, allowing a script to be injected and executed in the victim’s browser. ...

CVE-2021-32735

Kirby CMS vulnerability CVE-2021-32735 affects Kirby 3.5.5 and 3.5.6 where the Panel’s ListItem component displayed HTML in page titles (and related fields) as-is, enabling cross-site scripting (XSS). Exploitation could enable malicious authenticated Panel users to escalate privileges if they gai...

CVE-2021-32538

ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrary files without logging in, and further execute code unrestrictedly...

CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...

CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...