File Deletion Vulnerability in daozicms V1.4

Daozicms Enterprise Building System is a cms enterprise building system developed by Thinkphp6.0.2+layui-v2.3.0+Mysql5.7. A file deletion vulnerability exists in daozicms V1.4, which can be exploited by attackers to cause a denial of service attack...

DBHcms Cross-Site Scripting Vulnerability (CNVD-2020-49085)

DBHcms is a small, free and open source content management system for personal and small business websites. A stored cross-site scripting vulnerability exists in DBHcms 1.2.0. The vulnerability stems from the non-existence of the htmlspecialchars function form 'Name' in dbhcmstypes.php. An attack...

DBHcms Cross-Site Request Forgery Vulnerability (CNVD-2020-49090)

DBHcms is a small, free and open source content management system for personal and small business websites. DBHcms 1.2.0 suffers from a cross-site request forgery vulnerability. An attacker can exploit this vulnerability to remove any menu via /index.php?dbhcmspid=-80&deletemenu=9...

UCMS has information leakage vulnerability

UCMS is a simple and efficient PHP open source website building system. UCMS suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in UCMS

UCMS is an open source content management system, which can be used to quickly develop a variety of enterprise stations, article stations and station systems. UCMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

The vulnerability of the WordPress website content management system lies in the lack of measures to eliminate script-related HTML tags on web pages, allowing attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to the failure to remove scipt-related HTML tags from web pages. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...

High-Severity TinyMCE Cross-Site Scripting Flaw Fixed

A high-severity flaw has been disclosed in TinyMCE, an open-source text editor used in the content management systems CMS of websites. The recently patched flaw could have been potentially exploited remotely by attackers to gain administrative privileges to websites. TinyMCE, developed by Tiny...

flatCore Code Issue Vulnerability

flatCore is a lightweight content management system CMS based on PHP and SQLite. A security vulnerability exists in flatCore versions prior to 1.5.7. An attacker can exploit the vulnerability to upload and execute .php files...

Destoon B2B Content Management System Backend File Inclusion Vulnerability

DESTOON® B2B Website Management System is an open source B2B e-commerce industry portal solution based on PHP+MySQL. A file inclusion vulnerability exists in the backend of the Destoon B2B content management system, which can be exploited by attackers to gain server administrative privileges...

Command Execution Vulnerability in Fish Leap Cms

Catfish CMS is a content management system CMS developed by Catfish CMS for enterprise applications. FishCenter CMS inherits the many advantages of Catfish CMS and develops the unique qualities of FishCenter CMS according to the application oriented to provide a guarantee for the enterprise to...

penetration

This repository contains a collection of 0-day exploits and vulnerabilities for various CMS platforms, including CreateLive CMS, BlueCMS, and DVBBS. The exploits are primarily SQL injection and file upload vulnerabilities. The CreateLive CMS exploits include: A SQL injection vulnerability in the...

Stored Cross-site Scripting Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.

PHPOK system is a content management system for website construction developed by Shenzhen 锟铻科技有限公司formerly known as PHPOK Studio. A stored cross-site scripting vulnerability exists in PHPOK. The vulnerability can be exploited to obtain sensitive information such as administrator cookies...

Code Execution Vulnerability in CLTPHP Content Management System

CLTPHP Content Management System is a PHP content management system for building websites efficiently. A code execution vulnerability exists in CLTPHP Content Management System, which can be exploited by attackers to gain server privileges...

File upload vulnerability in ucms content management system

UCMS is a simple open source content management system, which can be very easily used to quickly develop various enterprise stations, article stations and station systems. ucms content management system file upload vulnerability, attackers can use the vulnerability to obtain server administrative...

Code execution vulnerability exists in empire cms (CNVD-2020-48544)

Empire CMS is a content management system CMS. A code execution vulnerability exists in Empire cms, which can be exploited by an attacker to remotely execute malicious code...

File Upload Vulnerability in WCMS

WCMS is a CMS turned editorially oriented editor. WCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Arbitrary File Upload Vulnerability in Content Management System of Nanchang Boran Technology Co.

Nanchang Boran Technology Co., Ltd. is a professional company providing enterprise information construction application and promotion services. The content management system of Nanchang Boran Technology Co., Ltd. suffers from an arbitrary file upload vulnerability, which can be exploited by...

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Co.

DedeCMS for PHP Web Content Management System - Dream Content Management System, using XML namespace style core templates: templates are all saved using the file form, the user design templates, website upgrades transfer are provided to facilitate the transfer of template labels stationmasters ca...

Information leakage vulnerability in content management system of Nanchang Boran Technology Co.

Nanchang Boran Technology Co., Ltd. was founded in April 2009, for Nanchang various large and medium-sized enterprises to design and produce websites, business scope design website planning, web design, website construction, website optimization and search engine optimization and other services...

Arbitrary File Deletion Vulnerability in DM Website System

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM website builder system exists arbitrary file deletion vulnerability. Attackers can exploit the vulnerability to delete arbitrary files...