Catfish CMS suffers from a file upload vulnerability (CNVD-2021-49555)

Catfish CMS is a free and open source PHP content management system. Catfish CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Catfish CMS suffers from a file upload vulnerability (CNVD-2021-49557)

Catfish CMS is a free and open source PHP content management system. Catfish CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56484)

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms 2019 suffers from a SQL injection vulnerability. The vulnerability originates from user/ztconfig.php SQL injection via the dohang or img POST parameter. No detailed vulnerability details are currently available...

WebPort 路径遍历漏洞

WebPort is a remote access and preventive maintenance device. It enables access to control system data and equipment. A path traversal vulnerability exists in Webport CMS in version 1.19.10.17121, which stems from the product failing to properly filter for specific elements in the path of a...

PHPOK suffers from a file upload vulnerability (CNVD-2021-46925)

PHPOK is a website building content management system to achieve customized open source free website building cms system. PHPOK has a file upload vulnerability that can be exploited by attackers to gain control of the server...

5UCMS suffers from SQL injection vulnerability (CNVD-2021-46910)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a SQL injection vulnerability , attackers can use the...

5UCMS suffers from SQL injection vulnerability (CNVD-2021-46894)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a SQL injection vulnerability , attackers can use the...

phpwcms code injection vulnerability

phpwcms is an open source Web content management system. It is fast, easy to install and runs on any standard web server platform that supports PHP/MySQL. phpwcms suffers from a code injection vulnerability that can be exploited by attackers via /phpwcms/setup/setup.php...

GetSimple CMS Cross-Site Scripting Vulnerability

GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in GetSimple CMS 3.3.15 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the sitename, username, and ema...

SQL injection vulnerability exists in 5UCMS (CNVD-2021-46919)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a SQL injection vulnerability , attackers can use the...

Command Execution Vulnerability in 5UCMS

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a command execution vulnerability, attackers can use this...

5UCMS suffers from SQL injection vulnerability (CNVD-2021-46918)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a SQL injection vulnerability , attackers can use the...

slackero phpwcms 代码注入漏洞

phpwcms is an open source Web content management system. It is fast, easy to install and runs on any standard web server platform that supports PHP/MySQL. phpwcms suffers from a code injection vulnerability that can be exploited by attackers via /phpwcms/setup/setup.php...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2021-49143)

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo. The vulnerability can be exploited to conduct cross-site scripting attacks via the gourl parameter in login.php...

The vulnerability of the CMS system Super CMS Blog Pro PHP Script, which arises due to insufficient validation of input data, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the CMS system Super CMS Blog Pro PHP Script exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

NoneCMS 信息泄露漏洞

NoneCMS is a content management system CMS based on Thinkphp. An information disclosure vulnerability exists in NoneCMS version 1.3. A remote attacker can exploit this vulnerability to obtain sensitive information via /nonecms/vendor...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-47150)

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-47152)

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-47151)

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2021-32681

CVE-2021-32681 affects Wagtail (Django-based CMS). The issue is a cross-site scripting (XSS) vulnerability in the use of the {% include_block %} template tag to render plain-text StreamField blocks (CharBlock/TextBlock or derived blocks) without a specified template, where output is not HTML-esca...