File Upload Vulnerability in LzCMS Content Management System Backend

LzCMS is a blog system developed by ThinkPHP+layui. A file upload vulnerability exists in the background of LzCMS content management system, which can be exploited by attackers to gain control of the web server...

TYPO3 cross-site scripting vulnerability (CNVD-2021-26150)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Typo3 Association. TYPO3 suffers from a cross-site scripting vulnerability that originates from insufficient processing of user-supplied data in the system extension Fluid typo3 / cms-fluid when...

Gila CMS 代码问题漏洞

Gila CMS is an open source content management system CMS based on PHP and MySQL. A file upload vulnerability exists in Gila CMS 1.16.0. An attacker can exploit this vulnerability to upload a shell to the tmp directory, which can then be used to execute PHP files using .htaccess via the logging...

SQL Injection Vulnerability in Wild Rain Novel Cms

Wild Rain Fiction CMS is a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Raining Novels cms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

File Upload Vulnerability in XHCMS Backend

XHCMS is a version of a general-purpose cms system that supports full site static. There is a file upload vulnerability in the background of XHCMS, which can be exploited by attackers to obtain server control privileges...

SQL Injection Vulnerability in bycms Content Management System

Beyoncms bycms content management system is a content management system. The bycms content management system suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to gain server control privileges...

File Upload Vulnerability in easySite Content Management System

CSCL is a provider of artificial intelligence technology and informatization software and platforms. A file upload vulnerability exists in easySite Content Management System, which can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in MCms Backend of Jiangxi Minsoft Technology Co.

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms backend SQL injection vulnerability, attackers can use the...

Jiangxi Minsoft Technology Co., Ltd. MCms background exists arbitrary file deletion vulnerability

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms back-end arbitrary file deletion vulnerability, an attacker can us...

Five Fingers CMS suffers from SQL injection vulnerability (CNVD-2020-62401)

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive data...

Command Execution Vulnerability in PHPCMS of Coolmile (Beijing) Culture Media Co.

PHPCMS is a web content management system based on PHP and Mysql architecture. There is a command execution vulnerability in PHPCMS, which can be exploited by attackers to obtain sensitive information and execute arbitrary code...

Xi'an Ziyun Antelope Network Technology Co., Ltd.'s CLTPHP has Arbitrary File Download Vulnerability

cltphp is a content management system based on php technology. There is an arbitrary file download vulnerability in CLTPHP of Xi'an Purple Cloud Antelope Network Technology Limited Liability Company. An attacker can exploit the vulnerability to download arbitrary file downloads and obtain sensiti...

S-CMS e-commerce system backend has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. A SQL injection vulnerability exists in the backend of S-CMS e-commerce system. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in Five Fingers CMS

Five Fingers CMS is an open source content management system. Five Fingers CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

UCMS Command Execution Vulnerability

UCMS is a content management system written in PHP. UCMS v1.4.8 version of the existence of command execution vulnerability, the vulnerability stems from the file written fopen function there are arbitrary command execution vulnerability, an attacker can take advantage of the vulnerability can be...

BEESCMS suffers from an override access vulnerability

BEESCMS is a scalable content management system CMS based on PHP and MySQL. BEESCMS suffers from an override access vulnerability. An attacker can exploit the vulnerability to log in to the administrator backend without a password...

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in IBM® SDK Java™ Technology Edition

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-4473 DESCRIPTION: Multiple binarie...

File upload vulnerability in UCMS fi***.php file

UCMS is a content management system written in PHP. A file upload vulnerability exists in the UCMS fi.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59405)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in ZZCMS2020 Backend (CNVD-2020-59314)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...