Unspecified vulnerability in MediaWiki (CNVD-2021-37744)

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.2 and earlier versions, which stems from the fac...

Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting (XSS)

Exploit Title: Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting XSS Date: 13/05/2021 Exploit Author: Ayşenur KARAASLAN Vendor Homepage: https://podcastgenerator.net/demoV2/ Software Link: https://podcastgenerator.net/download and...

SQL Injection Vulnerability in DHCMS (CNVD-2021-37334)

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Podcast Generator 3.1 Cross Site Scripting

Exploit Title: Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting XSS Date: 13/05/2021 Exploit Author: Ayşenur KARAASLAN Vendor Homepage: https://podcastgenerator.net/demoV2/ Software Link: https://podcastgenerator.net/download and...

Command Execution Vulnerability in DHCMS

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Podcast Generator 3.1 - (Long Description) Persistent Cross-Site Scripting Vulnerability

Exploit Title: Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting XSS Exploit Author: Ayşenur KARAASLAN Vendor Homepage: https://podcastgenerator.net/demoV2/ Software Link: https://podcastgenerator.net/download and...

SQL Injection Vulnerability in iCMS (CNVD-2021-37339)

iCMS is a content management system built with PHP and MySQL. iCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in DHCMS (CNVD-2021-37332)

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

File Upload Vulnerability in JTBC Web Content Management System (PHP) at Shanghai SevenWise Network Technology Co.

JTBC Web Content Management System PHP is a website system that can expand and clone existing modules. Ltd. JTBC Web Content Management System PHP has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Phpfusion Cross-Site Scripting Vulnerability

Phpfusion is a lightweight content management system from Phpfusion UK. PHPFusion 9.03.110 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject arbitrary web script or HTML...

NoneCms Cross-Site Scripting Vulnerability (CNVD-2021-34498)

NoneCms is a simple and compact open-source content management system that can be used to quickly build corporate sites, personal blogs, and support mobile. NoneCms 1.3.0 version of static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf cross-site scripting vulnerability. The...

Hurricane (Shenzhen) Software Co., Ltd. Hurricane CMS has SQL injection vulnerabilities

Hurricane CMS is a content management system developed using PHP mysql. Hurricane Shenzhen Software Co., Ltd. Hurricane CMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Hurricane (Shenzhen) Software Co., Ltd. Hurricane CMS suffers from SQL injection vulnerabilities (CNVD-2021-35569)

Hurricane CMS is a content management system developed using PHP mysql. Hurricane Shenzhen Software Co., Ltd. Hurricane CMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Command Execution Vulnerability in CmsEasy Backend

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. A command execution vulnerability exists in the CmsEasy backend. An attacker can exploit the vulnerability to gain server privileges...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-35559)

Extreme CMS is an open source and free CMS web content management system in PHP language. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

PHPOK suffers from a command execution vulnerability (CNVD-2021-35553)

PHPOK is a website building content management system to achieve customized open source free website building cms system. PHPOK has a command execution vulnerability that can be exploited by attackers to execute commands...

Craft CMS Cross-Site Scripting Vulnerability (CNVD-2021-40321)

Craft CMS is a content management system for developers, designers and web professionals that provides flexibility, power and ease of use. A cross-site scripting vulnerability exists in Craft CMS versions prior to 3.6.13. No details of the vulnerability are provided at this time...

LivingLogic XIST4C Cross-Site Scripting Vulnerability (CNVD-2021-39967)

XIST4C is a content management system, shopping cart software and web application framework from LivingLogic. A cross-site scripting vulnerability exists in LivingLogic XIST4C versions prior to 0.107.8. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via...

LivingLogic XIST4C 跨站脚本漏洞

XIST4C is a content management system, shopping cart software and web application framework from LivingLogic. A cross-site scripting vulnerability exists in LivingLogic XIST4C versions prior to 0.107.8. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via...

Grav Code Injection Vulnerability

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a code injection vulnerability that can be exploited by an attacker to perform arbitrary code execution and elevate privileges on an...