Code Execution Vulnerability in WMCMS of Chongqing Yu Yue Optoelectronics Technology Co.

WMCMS is a set of PHP + MYSQL based on the core development, free + open source professional Chinese labeling station-building system. WMCMS has a code execution vulnerability that can be exploited by an attacker to gain administrative privileges on the web server...

Hefei Tianxun Information Technology Co., Ltd. pushes the volume of CMS there are SQL injection vulnerabilities

Push the volume of CMS is a content management system developed by Hefei Tianxun Information Technology Co. Hefei Tianxun Information Technology Co., Ltd Push Roller CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

File upload vulnerability in MCMS backend up***.do page

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend up.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Directory traversal vulnerability in ESPCMS backend Te***.php file

ESPCMS is a content management system CMS based on PHP and MySQL. A directory traversal vulnerability exists in the ESPCMS backend Te.php file. An attacker can exploit the vulnerability to obtain sensitive information...

PHPOK 5.5 suffers from a command execution vulnerability (CNVD-2020-47655)

PHPOK is a content management system for website construction developed by Shenzhen KunHei Technology Co. A command execution vulnerability exists in PHPOK 5.5, which can be exploited by attackers to gain server privileges...

We-COM Municipality portal CMS SQL Injection Vulnerability

We-COM Municipality portal CMS is a Content Management System CMS from the Italian company We-COM. A SQL injection vulnerability exists in We-COM Municipality portal CMS version 2.1.x. The vulnerability stems from a lack of validation of externally-entered SQL statements in a database-based...

File Upload Vulnerability in Lerx CMS

Lerx CMS is a content management system developed in Java + MySQL. Lerx CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain server privileges...

Command Execution Vulnerability in Zendo cms of Qingdao Easoft Tianchuang Network Technology Co. Ltd (CNVD-2020-45147)

Zendo is the first open source project management software in China. It integrates product management , project management , quality management , document management , organization management and transaction management . Qingdao Easoft Tianchuang Network Technology Co., Ltd Zendo cms has a comman...

SQL injection vulnerability in deituiCMS (CNVD-2020-45161)

deituiCMS is a PHP-based open source content management system. A SQL injection vulnerability exists in deituiCMS, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in deituiCMS (CNVD-2020-45160)

deituiCMS is a PHP-based open source content management system. A SQL injection vulnerability exists in deituiCMS, which can be exploited by attackers to obtain sensitive database information...

Naviwebs Navigate CMS Authorization Issue Vulnerability (CNVD-2020-35977)

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A security vulnerability exists in Naviwebs Navigate CMS version 2.9 r1433, which originated when the program resets passwords, allowing users to continue setting passwords even if an...

PACKET TIDE ExpressionEngine Code Issue Vulnerability

PACKET TIDE ExpressionEngine is the U.S. PACKET TIDE company's set of open source content management system CMS. A security vulnerability exists in PACKET TIDE ExpressionEngine versions prior to 5.3.2. A remote attacker can exploit the vulnerability to execute arbitrary code...

Naviwebs Navigate CMS Authorization Issues Vulnerability

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A security vulnerability exists in the password recovery feature in Naviwebs Navigate CMS version 2.9 r1433, which originates from a notfound message being returned when the user name o...

Code execution vulnerability in SongCMS PHP version

SongCMS is a PHP+MySQL, ASP+Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users quickly build and deploy enterprise-level portals. A code execution vulnerability exists in SongCMS PHP version, which can be exploited by...

Code execution vulnerability in EyouCms (CNVD-2020-44392)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms has a code execution vulnerability that can be exploited by attackers to obtain server administrative privileges...

EyouCms has a logic flaw vulnerability

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms has a logic flaw vulnerability that can be exploited by attackers to obtain server administrative privileges...

Victor CMS Cross-Site Scripting Vulnerability (CNVD-2021-24255)

Victor CMS is a simple content management system. A persistent cross-site scripting vulnerability exists in admin/users.php?source=adduser in Victor CMS 1.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the username, userfirstname, or userlastname parameters...

Naviwebs Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2020-35981)

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A cross-site scripting vulnerability exists in Naviwebs Navigate CMS version 2.9. The vulnerability stems from a lack of proper validation of client-side data by the web application. An...

SQL Injection Vulnerability in XSLCMS jo***-sh***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS jo-sh.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in XSLCMS ne***-sh***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS ne-sh.php page. An attacker can exploit the vulnerability to obtain sensitive database information...