4389 matches found
File Upload Vulnerability in 115CMS
115CMS is an open source content management system developed with ThinkPHP framework. 115CMS has a file upload vulnerability that can be exploited by attackers to gain control of a web server...
File Deletion Vulnerability in Extreme Cms
Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS file deletion vulnerability , an attacker can exploit the vulnerability to delete any file on the server...
Langfang Extreme Networks Technology Co., Ltd Extreme CMS beta version has a file upload vulnerability
Extreme CMS is open source and free PHPCMS web content management system. Ltd. Extreme CMS beta version has a file upload vulnerability that can be exploited by an attacker to gain access to the site administrator privileges...
Langfang Extreme Networks Technology Co., Ltd Extreme CMS beta version suffers from arbitrary file download vulnerability
Extreme CMS is open source and free PHPCMS web content management system. Ltd Extreme CMS beta version suffers from an arbitrary file download vulnerability, which can be exploited by attackers to compromise confidentiality...
PT-2020-13211
Name of the Vulnerable Software and Affected Versions: direct mail extension for TYPO3 versions through 5.2.3 Description: The issue allows for Denial of Service via log entries. Recommendations: For versions through 5.2.3, update to a version later than 5.2.3 to resolve the issue...
PHP-Fusion Cross-Site Scripting Vulnerability
PHP-Fusion is a Malaysian PHP-Fusion company based on MySql and PHP open source lightweight content management system . The system contains modules such as news, articles and forums. A cross-site scripting vulnerability exists in PHP-Fusion version 9.03.50. The vulnerability stems from the lack o...
PHP-Fusion cross-site scripting vulnerability (CNVD-2021-31476)
PHP-Fusion is a Malaysian company PHP-Fusion open source lightweight content management system based on MySql and PHP . The system contains modules such as news, articles and forums. A cross-site scripting vulnerability exists in PHP-Fusion version 9.03.50. A remote attacker can exploit this...
Multiple SQL Injection Vulnerabilities in YIXUNCMS Backend
YIXUNCMS is a showcase website system developed by Yixun Software Studio for small and medium-sized enterprises, using PHP language and with a stable MYSQL database. YIXUNCMS background there are multiple SQL injection vulnerabilities. Attackers can use the vulnerability to obtain sensitive...
Logic flaw vulnerability in YCCMS Ad***.cl***.php file
YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. A logic flaw exists in the YCCMS Ad.cl.php file. An attacker can use the vulnerability to change any user name and password without authorization...
Arbitrary file deletion vulnerability in YCCMS Va***.cl***.php file
YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS Va.cl.php file exists arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete arbitrary files...
Unspecified Vulnerability in Subrion CMS
Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. An unspecified vulnerability exists in Subrion CMS. An attacker can exploit the vulnerability to inject scripts and...
Mono MonoX CMS Code Execution Vulnerability
MonoX CMS is an ASP.NET-based content management system CMS and social networking platform from Mono Croatia. A security vulnerability exists in Mono MonoX CMS 5.1.40.5152 and earlier versions. The vulnerability can be exploited by an attacker to execute arbitrary code by modifying an ASPX templa...
SSYCMS UGC Contributor Edition suffers from arbitrary file read vulnerability
SSYCMS is a free and open source commercial content management system. SSYCMS UGC Submission Edition suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to arbitrarily read server files...
penetration
This repository contains a collection of exploit files for various vulnerabilities in web applications, specifically CMS Content Management System platforms. The exploits are categorized by the CMS platform they target, and each file contains a description of the vulnerability and the exploit cod...
Command execution vulnerability in the we***.ma***.php file in the backend of Super CMS
Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...
Command Execution Vulnerability in Super CMS Backend ca***.ma***.php File
Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...
Fork CMS 5.8.0 Script Insertion
Document Title: =============== Fork CMS v5.8.0 - Multiple Persistent Web Vulnerbilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2208 ID 3073: https://github.com/forkcms/forkcms/pull/3073 Release Date: ============= 2020-04-17 Vulnerability...
LJCMS suffers from a file upload vulnerability (CNVD-2020-26416)
LJCMS is an open source enterprise website management system based on PHP+MYSQL. LJCMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of a web server...