Command Execution Vulnerability in PHP7CMS

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. PHP7CMS has a command execution vulnerability that can be exploited by attackers to gain server privileges...

Arbitrary File Deletion Vulnerability in SECMS

SECMS is an open source PHP content management system. SECMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete files and cause a system reinstallation...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35731)

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

UCMS has a vertical override vulnerability

UCMS is a simple open source content management system. UCMS suffers from a vertical override vulnerability that can be exploited by attackers to obtain sensitive information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32379)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Arbitrary File Read Vulnerability in LightCMS

LightCMS is a lightweight content management system CMS that can also be used as a general-purpose back-office management framework. An arbitrary file read vulnerability exists in LightCMS, which can be exploited by an attacker to read arbitrary files...

SQL Injection Vulnerability in iCMS

iCMS is a content management system built with PHP and MySQL. iCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2021-29434

Wagtail (a Django-based CMS) has a vulnerability in rich-text links where server-side checks do not enforce a valid protocol, allowing a malicious admin user to publish content containing javascript: URLs. Affected versions can be exploited via admin POST requests; an ordinary site visitor cannot...

File Upload Vulnerability in Super cms v2.39 (CNVD-2021-32175)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

File Upload Vulnerability in Super cms v2.39 (CNVD-2021-32173)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

Command execution vulnerability in kiteCMS backend

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development, applicable to individuals and enterprises to quickly build stations and development needs. kiteCMS backend command execution vulnerability , attackers can exploit t...

SQL Injection Vulnerability in CSZ CMS

CSZ CMS is an open source content management system. CSZ CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

EmpireCMS in Command Execution Vulnerability

EmpireCMS Empire Content Management System is an open source content management system CMS. EmpireCMS is vulnerable to a command execution vulnerability that can be exploited by attackers to gain control of the server...

Joomla! local file inclusion vulnerability (CNVD-2021-30597)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A local file inclusion vulnerability exists in Joomla! versions 3.0.0 through...

Grav 安全漏洞

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms, and one-page product displays. A security vulnerability exists in Grav admin plugin versions prior to 1.10.11, which can be exploited by attackers to execute arbitrary code...

TnCMS has a file upload vulnerability

TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of the server...

File Deletion Vulnerability in Super CMS

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

Arbitrary File Deletion Vulnerability in TnCMS (CNVD-2021-30351)

TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS has an arbitrary file deletion vulnerability, which can be exploited by an attacker to traverse directories and delete files arbitrarily...

Command Execution Vulnerability in Cscms Backend

cscms is a diversified content management system, using PHP5 MYSQL as the technical basis for development, using OOP object-oriented approach to the basic operation of the framework to build. Cscms backend command execution vulnerability, attackers can use the vulnerability to obtain control of t...

WCMS Cross-Site Scripting Vulnerability

WCMS is a content management system CMS that uses an open web interface to build websites. A cross-site scripting vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to inject arbitrary web script and HTML via the pagename parameter of wex/html.php...