4390 matches found
Grav 路径遍历漏洞
Grav is a flat file CMS that uses Markdown files for content management. An arbitrary file deletion vulnerability exists in the BackupDelete feature of Grav 1.7.0-rc.17 and earlier versions. An attacker can exploit this vulnerability by using path traversal techniques to delete arbitrary files on...
Batflat cross-site scripting vulnerability (CNVD-2021-17743)
Batflat is a simple, lightweight content management system CMS. A cross-site scripting vulnerability exists in Snippets in Batflat 1.3.6, which can be exploited by a remote attacker to inject arbitrary web script or HTML via a field name...
CSZ CMS Cross-Site Scripting Vulnerability (CNVD-2021-19691)
CSZ CMS is an open source content management system. A cross-site scripting vulnerability exists in several pages of CSZ CMS 1.2.9. The vulnerability can be exploited to conduct cross-site scripting attacks via field names...
Batflat Cross-Site Scripting Vulnerability
Batflat is a simple, lightweight content management system CMS. A cross-site scripting vulnerability exists in "Navigation" in Batflat 1.3.6, which can be exploited by remote attackers to inject arbitrary web script or HTML via a field name...
Batflat Cross-Site Scripting Vulnerability (CNVD-2021-18015)
Batflat is a simple, lightweight content management system CMS. A cross-site scripting vulnerability exists in Galleries in Batflat 1.3.6. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via field names...
The vulnerabilities of the “/submit.php” and “/infusions/downloads/downloads.php” components of the PHP-Fusion CMS system allow attackers to execute arbitrary SQL queries.
The vulnerability of the “/submit.php” and “/infusions/downloads/downloads.php” components of the PHP-Fusion CMS system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...
CSZ CMS 跨站脚本漏洞
CSZ CMS is an open source content management system. A cross-site scripting vulnerability exists in several pages of CSZ CMS 1.2.9. The vulnerability can be exploited to conduct cross-site scripting attacks via field names...
CSZ CMS Cross-Site Scripting Vulnerability
CSZ CMS is an open source content management system. A stored cross-site scripting vulnerability exists in /admin/pages/new in CSZ CMS 1.2.9. An attacker can exploit this vulnerability via the content parameter to conduct a cross-site scripting attack...
There is an unspecified vulnerability in Joomla
Joomla is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source, cross-platform content management system CMS. Joomla suffers from a security vulnerability that stems from insufficient length for the use of 2FA secret sharing. No details of the vulnerability ar...
File upload vulnerability exists in UCMS (CNVD-2021-21601)
UCMS is a content management system written in PHP. There is a file upload vulnerability in the UCMS backend, which can be exploited by an attacker to upload arbitrary scripts to obtain a website webshell...
Logic Flaw Vulnerability in YZMCMS Content Management System
YZMCMS content management system is an all-in-one website building system. A logic flaw vulnerability exists in the YZMCMS Content Management System, which can be exploited by an attacker to modify a user's password...
Incorrect ACL Check Vulnerability in Joomla!
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An incorrect ACL checking vulnerability exists in Joomla! 3.0.0 - 3.9.24. An...
B2evolution Cross-Site Scripting Vulnerability (CNVD-2021-100271)
B2evolution is a PHP and MySQL-based community content management system. B2evolution cross-site scripting vulnerability can be exploited by attackers to execute malicious JavaScript code via the plugin name input field in the plugin module...
e107 跨站请求伪造漏洞
e107 is an open source, free and PHP and MySQL based Content Management System CMS from the E107 team. The system supports a variety of plug-ins and appearance themes, and can be used as a personal blog, discussion community, archive repository and so on. A cross-site request forgery vulnerabilit...
Directus Information Disclosure Vulnerability
Directus is a real-time Api and application dashboard. It is used to manage Sql database content. An information disclosure vulnerability exists in Directus version 8.x prior to version 8.8.1, which can be exploited by an attacker to view all users in the CMS using API user id...
WordPress Plugin Supsystic Contact Form Has Multiple Vulnerabilities
WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. WordPress plugin Supsystic Contact Form suffers from SQL injection and cross-site scripting...
EmpireCMS suffers from a code execution vulnerability (CNVD-2021-17381)
EmpireCMS Empire Content Management System is an open source content management system CMS. A code execution vulnerability exists in EmpireCMS 7.5, which can be exploited by an attacker to gain control of the server...
SQL Injection Vulnerability in iCMS Content Management System
iCMS is an efficient and simple content management system built with PHP and MySQL. An SQL injection vulnerability exists in the iCMS content management system, which can be exploited by attackers to obtain sensitive information from the database...
BlackCat CMS Cross-Site Scripting Vulnerability (CNVD-2021-14158)
BlackCat CMS is a PHP5, HTML5 content management system. A stored cross-site scripting vulnerability exists in BlackCat CMS 1.3.6. The vulnerability can be exploited to conduct a cross-site scripting attack via the Display Name field in backend/preferences/ajaxsave.php...