CatfishCMS suffers from a logic flaw vulnerability (CNVD-2020-73469)

CatfishCMS is a PHP content management system does not require a high depth of expertise easy to build the site using simple to adapt to different needs. CatfishCMS has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of protection for website structures. This allows attackers to inject arbitrary HTML code into users’ browsers.

The vulnerability of the Adobe Experience Manager content and media management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary HTML code in the user’s browser remotely...

SQL Injection Vulnerability in MCms

MCms is a complete open source content management system. MCms suffers from a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...

File Upload Vulnerability in LzCMS Content Management System

LzCMS is a simple blog system developed with ThinkPHP+layui. A file upload vulnerability exists in the LzCMS content management system, which can be used by attackers to gain server privileges...

Code Execution Vulnerability in UCMS System

UCMS is a content management system written in PHP. A code execution vulnerability exists in UCMS, which can be exploited by attackers to execute malicious code...

UCMS 代码问题漏洞

UCMS is a simple and efficient PHP open source website building system. UCMS 1.5.0 is vulnerable to file upload. An attacker can use this vulnerability to gain administrative privileges on the server...

Ocean CMS suffers from SQL injection vulnerability (CNVD-2020-71642)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. Ocean CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

[SECURITY] Fedora 33 Update: drupal7-7.74-1.fc33

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 32 Update: drupal7-7.74-1.fc32

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Fedora: Security Advisory for drupal7 (FEDORA-2020-7d8f772540)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for drupal7 (FEDORA-2020-088196d926)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-26229

TYPO3 is an open source PHP based web content management system. In TYPO3 from version 10.4.0, and before version 10.4.10, RSS widgets are susceptible to XML external entity processing. This vulnerability is reasonable, but is theoretical - it was not possible to actually reproduce the...

CVE-2020-26229

TYPO3 RSS widgets (Dashboard) are affected by an XML External Entity (XXE) issue in TYPO3 10.4.0–10.4.9, enabling XXE processing due to vulnerable XML handling. The issue is considered low risk/limited impact and notable for requiring a backend user account; no public exploitation details are pro...

Sql injection

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 user session identifiers were stored in cleartext - without processing with additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in...

CVE-2020-26228

TYPO3 prior to versions 9.5.23 and 10.4.10 stores user session identifiers in cleartext (no extra cryptographic hashing). The issue cannot be exploited directly and requires a chained attack (e.g., SQL injection in another component). Affected software is TYPO3 CMS (PHP-based). The remediation is...

Command Execution Vulnerability in the Backend of Wild Rain Novel CMS (CNVD-2020-68554)

Wild Rain Fiction Content Management System provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Rain Novel cms backend command execution vulnerability , attackers can use the vulnerability to obtain server privileges...

UCMS suffers from a file upload vulnerability (CNVD-2020-69467)

UCMS is a content management system written in PHP. UCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Code Execution Vulnerability in UCMS

UCMS is a content management system written in PHP. A code execution vulnerability exists in UCMS, which can be exploited by an attacker to gain administrative privileges on the server...

Arbitrary File Deletion Vulnerability in Extreme CMS Backend

Extreme CMS is an open source and free PHPCMS web content management system. An arbitrary file deletion vulnerability exists in the backend of Extreme CMS, which can be exploited by attackers to compromise the integrity of the system...

UCMS suffers from a file upload vulnerability (CNVD-2020-68694)

UCMS is a simple open source content management system, it can be very convenient to quickly develop various kinds of enterprise station, article station and station system. UCMS has a file upload vulnerability , the attacker can obtain server privileges...