WCMS 路径遍历漏洞

WCMS is a content management system CMS that uses an open web interface to build websites. A directory traversal vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to read arbitrary files on the server running the application via the pagename parameter of wex/html.php...

Composr Cross-Site Scripting Vulnerability

Composr is an open source content management system CMS with advanced social, interactive and dynamic features. A cross-site scripting vulnerability exists in Composr version 10.0.36. The vulnerability can be exploited to conduct cross-site scripting attacks via XML scripts...

WCMS 路径遍历漏洞

WCMS is a content management system CMS that uses an open web interface to build websites. A directory traversal vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to read arbitrary files on the server running the application via the path parameter of wex/cssjs.php...

Magnolia Cross-Site Scripting Vulnerability

Magnolia is a Java-based open source content management system CMS. A reflected cross-site scripting vulnerability exists in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter in Magnolia versions 6.1.3 - 6.2.3. No detailed vulnerability details are available at this time...

Arbitrary File Deletion Vulnerability in Catfish CMS

Catfish CMS is an open source and free PHP content management system. An arbitrary file deletion vulnerability exists in the Catfish CMS backend. An attacker can exploit the vulnerability to delete arbitrary files...

Sourcecodester Simple College Website Code Execution Vulnerability

Sourcecodester Simple College Website is a content management system of Sourcecodester. version 1.0 of Sourcecodester Simple College Website contains a code execution vulnerability that can be exploited by attackers to conduct remote code execution...

SQL Injection Vulnerability in Catfish CMS

Catfish CMS is an open source and free PHP content management system. Catfish CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

YzmCMS has an arbitrary file download vulnerability

YzmCMS is a lightweight open source content management system based on YZMPHP. YzmCMS has an arbitrary file download vulnerability that can only be exploited by attacks to obtain sensitive information...

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

The vulnerability of the WordPress website content management system, related to deficiencies in access control for certain functions, allows attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

BaserCMS OS Command Injection Vulnerability

BaserCMS is an open source enterprise-level content management system cms. An OS command injection vulnerability exists in BaserCMS versions prior to 4.4.5. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary OS commands...

BaserCMS JavaScript Input Improper Neutralization Vulnerability

BaserCMS is an open source enterprise-level content management system cms. A JavaScript Input Improper Neutralization vulnerability exists in the blog post editing feature in versions of BaserCMS prior to 4.4.5. A remote authenticated attacker can exploit this vulnerability to inject arbitrary...

BaserCMS JavaScript Input Improper Neutralization Vulnerability (CNVD-2021-23789)

BaserCMS is an open source enterprise-level content management system cms. A JavaScript Input Improper Neutralization vulnerability exists in the page editing feature in BaserCMS versions prior to 4.4.5. A remote authenticated attacker can exploit this vulnerability to inject arbitrary scripts...

Bitweaver cross-site scripting vulnerability (CNVD-2021-22575)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/admin/permissions.php URI...

XSS Vulnerability in Nethub CMS PHP Version

OTCMS Nettie CMS is an article-based web content management system CMS. An XSS vulnerability exists in the PHP version of OTCMS, which can be exploited by attackers to obtain an administrator cookie...

Bitweaver cross-site scripting vulnerability (CNVD-2021-22578)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/editpersonalpage.php URI...

Hurricane CMS has an arbitrary file read vulnerability

Hurricane CMS is a content management system developed using PHP mysql. Hurricane CMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-21358

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed...

CVE-2021-21370

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that content elements of type menu are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid...

Code injection

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as error message from another page. This leads to ...