File Inclusion Vulnerability in Polyglot CMS

Polygraph cms is a lightweight cms based on PHP+Mysql architecture that is quick to get started, flexible, simple and easy to use. There is a file inclusion vulnerability in JUGGING cms, which can be exploited by attackers to gain server privileges...

EyouCms suffers from XSS vulnerability (CNVD-2020-32622)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms XSS vulnerability , attackers can exploit the vulnerability to obtain user cookie information...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-32623)

LJCMS is a free and open source content management system. LLJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

Logic flaw vulnerability exists in cmseasy (CNVD-2020-32605)

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...

Arbitrary file deletion vulnerability in beescms

BEESCMS is a scalable content management system CMS based on PHP and MySQL. An arbitrary file deletion vulnerability exists in beescms, which can be exploited by an attacker to delete system files...

[SECURITY] Fedora 32 Update: drupal7-7.70-1.fc32

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

PHPOK suffers from a file upload vulnerability (CNVD-2020-38450)

PHPOK is a content management system for website construction developed by Shenzhen 锟铻科技有限公司 formerly known as PHPOK Studio, written in PHP, default MySQL database storage, based on the LGPL open source agreement license released to the online sharing use. PHPOK file upload vulnerability exists...

XSS vulnerability in Extreme CMS (CNVD-2020-38477)

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as administrator cookies...

Code Execution Vulnerability in Ear Distribution Frontend

Ear Distribution is a content management system. A code execution vulnerability exists in the frontend of Ear Distribution. An attacker could gain server privileges by constructing malicious code...

File upload vulnerability in Extreme CMS backend (CNVD-2020-33342)

Extreme CMS is an open source and free PHPCMS web content management system. A file upload vulnerability exists in the backend of Extreme CMS. Attackers can use the vulnerability to upload webshell and gain server privileges...

File Upload Vulnerability in OKCMS Web Content Management System of Zibo Oukai Information Technology Co.

Zibo Oukai Information Technology Co., Ltd. is a localized Internet company specializing in station building + promotion + operation in one. A file upload vulnerability exists in the OKCMS web content management system of Zibo Oukai Information Technology Co. An attacker can exploit the...

Arbitrary File Deletion Vulnerability in Aptar CMS (CNVD-2020-32581)

Aptar CMS website management system is developed with PHP+MYSQL technology and MVC model, with a clear structure and easy-to-maintain code. Aptar CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete server files...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-33092)

Extreme CMS is an enterprise-level open source content building system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Logic flaw vulnerability in LJCMS of Beijing Liangjing Zhicheng Technology Co., Ltd (CNVD-2020-33125)

LJCMS is a free and open source content management system. A logic flaw vulnerability exists in LJCMS of Beijing Liangjingzhicheng Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...

Logic flaws exist in the YiYu enterprise building system vulnerability

Eyou content management system EyouCms belongs to Hainan Zanzan Network Technology Co., Ltd. is the newest PHP open source website management system. EyouCms has a logic flaw vulnerability that can be exploited by attackers to tamper with other users' information...

penetration

This repository contains a collection of penetration testing files, primarily targeting various Content Management Systems CMS and web applications. The files are organized by the CMS or application they target, with each folder containing multiple files related to specific vulnerabilities or...

Extreme CMS has a flawed logic vulnerability

Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

JunAms Content Management System suffers from SQL Injection Vulnerability

JunAMS is an open source content management system with ThinkPHP as its framework. JunAms content management system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information about a database...

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2020-32356)

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site scripting vulnerability exists in the /panel/configuration/general settings page in Subrion CMS version...

XSS Vulnerability in S-CMS Enterprise Website Builder System

S-CMS is a set of asp/php based enterprise building system CMS. An XSS vulnerability exists in S-CMS enterprise website builder system, which can be exploited by an attacker to obtain an administrator cookie...