ZZZCMS zzzphp SQL注入漏洞

ZZZCMS zzzphp is a content management system CMS. A security vulnerability exists in ZZZCMS zzzphp version 1.7.1, which allows remote attackers to exploit the vulnerability to execute arbitrary code...

xiycms backend has arbitrary file read vulnerability

xiycms is an open source and free enterprise content management system. xiycms backend has an arbitrary file read vulnerability. An attacker can exploit the vulnerability to read the database configuration file...

Arbitrary Code Execution Vulnerability in Ocean Cms Backend

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. There is an arbitrary code execution vulnerability in the backend of SeaCMS, which can be exploited by attackers to gain control of the server...

FeehiCMS Code Issues Vulnerabilities

FeehiCMS is a Php based CMS website builder by Liufee Personal Developer. A code issue exists in FeehiCMS 2.1.0, which may lead to remote code execution. A malicious file may be uploaded when the administrator logs in and opens the "Administrator Image Upload" page...

SQL Injection Vulnerability in WDJA Web Content Management System

WDJA Web Content Management System is a set of existing modules can be expanded and cloned PHP open source CMS system , using UTF-8 encoding , to take the language/code/program two separate technical modes . WDJA Web Content Management System has a SQL injection vulnerability that can be exploite...

WordPress Plugin Autoptimize Authenticated Arbitrary File Upload Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. WordPress Plugin Autoptimize Authenticated suffers from an arbitrary file upload...

flatCore SQL Injection Vulnerability (CNVD-2021-03255)

flatCore is a lightweight content management system CMS based on PHP and SQLite. A SQL injection vulnerability exists in flatCore CMS prior to version 2.0.0 build 139. The vulnerability stems from the program accepting input from a malicious user without properly detecting the input, resulting in...

Command Execution Vulnerability in XYHCMS

XYHCMS is a completely open source CMS content management system. XYHCMS has a command execution vulnerability that can be exploited by an attacker to gain server control privileges...

penetration

This is a collection of exploit code and research for various vulnerabilities in web applications, specifically content management systems CMS. The code is written in various programming languages, including PHP, and is used to demonstrate how to exploit vulnerabilities in these systems. The...

flatCore CMS 跨站脚本漏洞

flatCore is a lightweight content management system CMS based on PHP and SQLite. A cross-site scripting vulnerability exists in flatCore CMS prior to version 2.0.0 build 139, which stems from the program accepting malicious client-side scripts and failing to properly detect them, which can be...

Wdja 跨站脚本漏洞

Wdja is a Php-based content management system from the Wdja team. A cross-site scripting vulnerability exists in WDJA CMS version 1.5, where the vulnerability tongji parameter does not do XSS filtering on user input, which can be exploited by an attacker to steal user credentials...

SeaCMS ad***_vi***_ma***.htm file has SQL injection vulnerability

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. SeaCMS advima.htm file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database...

Chongqing Fengshengjia E-commerce Co., Ltd. mall CMS exists overstepping the right loophole

The business scope of Chongqing Feng Shengjia E-commerce Co., Ltd. includes: Internet sales, advertising design and agency, software development, enterprise management, etc.. Chongqing Feng Shengjia E-commerce Co., Ltd. mall CMS has an overstepping vulnerability, which can be exploited by attacke...

Logic Flaw Vulnerability in ZZCMS2020

ZZCMS is a content management system. A logic flaw vulnerability exists in ZZCMS2020, which can be exploited by attackers to gain server privileges...

NukeViet SQL Injection Vulnerability

Vinades NukeViet is an open source content management system CMS from Vinades Vietnam.Vinades NukeViet is vulnerable to a SQL injection vulnerability that originates from a SQL INSERT statement containing raw header data e.g., Referer and User-Agent from HTTP requests. No detailed vulnerability...

File upload vulnerability exists in super cms (CNVD-2021-03275)

Super CMS is a content management system. A file upload vulnerability exists in super cms, which can be exploited by attackers to gain control of the server...

OIC Exponent CMS Input Validation Error Vulnerability (CNVD-2021-02030)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in IBM® SDK Java™ Technology Edition

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2590 DESCRIPTION: An unspecified...

Arbitrary File Deletion Vulnerability in SeaCMS

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03440)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A command execution vulnerability exists in the SeaCMS backend. An attacker can exploit this vulnerability to gain server privileges...