4389 matches found
Extreme CMS Ar***.php file has SQL injection vulnerability
Extreme CMS is an open source and free PHPCMS web content management system. An SQL injection vulnerability exists in the Extreme CMS Ar.php file. Attackers can exploit the vulnerability to obtain sensitive information in the database...
File Deletion Vulnerability in ShuipFCMS Content Management System
ShuipFCMS a content management system based on ThinkPHP framework as the core, using an independent grouping approach to development. ShuipFCMS content management system file deletion vulnerability, an attacker can be exploited to delete the install.lock file can lead to the reinstallation of the...
File upload vulnerability in zzcms framework
zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable protection. Open source, independent functional modules, to...
CVE-2020-24860
CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persistent XSS payload in the affected text fields. The user can get cookies from every authenticated user who visits the website...
Fedora: Security Advisory for drupal7 (FEDORA-2020-fe94df8c34)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 33 Update: drupal7-7.72-1.fc33
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
Logic Flaw Vulnerability in PCFCMS Frontend
PCFCMS is based on TP6.0 + framework for the core development of simple + general content management system. There is a logic flaw vulnerability in the frontend of PCFCMS, which can be exploited by attackers to obtain sensitive information...
SQL Injection Vulnerability in UCMS v1.4.8
UCMS is a content management system written in PHP. UCMS v1.4.8 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Fedora: Security Advisory for drupal7 (FEDORA-2020-0b32a59b54)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for drupal7 (FEDORA-2020-fbb94073a1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 32 Update: drupal7-7.72-1.fc32
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
[SECURITY] Fedora 31 Update: drupal7-7.72-1.fc31
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
Component GMapFP Unauthenticated Arbitrary File Upload Vulnerability in Joomla!
Joomla! is an open source content management system CMS. A security vulnerability exists in the Joomla! component GMapFP. An attacker can exploit the vulnerability to access the application's upload functionality, upload files without authenticating the application, and bypass the issue by changi...
Unspecified vulnerability in TYPO3 (CNVD-2021-26152)
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 7.4.0, 8.x prior to 8.7.0 and 9.x prior to 9.2.0. No detailed vulnerability details are currently available...
File Upload Vulnerability in OFCMS V1.1.4 Backend
OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the background of OFCMS version V1.1.4, which can be exploited by an attacker to gain administrative privileges on the server...
ZZCMS version 2020 is vulnerable to system reinstallation.
ZZCMS is a content management system for Webmaster Merchants. A system reinstallation vulnerability exists in ZZCMS version 2020, which can be exploited by attackers to cause a denial of service...
ZZCMS 2020 suffers from SQL injection vulnerability (CNVD-2020-58514)
ZZCMS is a content management system for Webmaster Merchants. ZZCMS 2020 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
ZZCMS suffers from SQL injection vulnerability (CNVD-2020-58517)
ZZCMS is a content management system for Webmaster Merchants. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Hoosk Cross-Site Request Forgery Vulnerability (CNVD-2020-50116)
Hoosk is a lightweight, user-centered, CodeIgniter-built content management system CMS that can be used to easily create stylish, responsive websites. A cross-site request forgery vulnerability exists in Hoosk versions prior to 1.7.2. An attacker could exploit this vulnerability to delete account...