4389 matches found
Code Execution Vulnerability in ETA CMS (CNVD-2020-26413)
ETA CMS is a simple, practical and efficient website builder. A code execution vulnerability exists in EDA CMS, which can be exploited by an attacker to gain control of a web server...
Code Execution Vulnerability in ETA CMS
ETA CMS is a simple, practical and efficient website builder. A code execution vulnerability exists in EDA CMS, which can be exploited by an attacker to gain control of a web server...
Macs Framework 1.14f CMS - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Title: Macs Framework 1.14f CMS - Persistent Cross-Site Scripting Software Link: https://sourceforge.net/projects/macs-framework/files/latest/download CVE: N/A Document Title: =============== Macs Framework v1.14f CMS - Multiple Web...
Code Execution Vulnerability in SongCMS
SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . SongCMS code execution vulnerability, attackers use the vulnerability to obtain...
Arbitrary File Deletion Vulnerability in Fiyocms System
Fiyocms is a free and open source cms system for rapid development of personal and corporate websites and blogging systems. Fiyocms system has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file under the server...
xyhcms background exists arbitrary file download vulnerability
xyhcms is a completely open source CMS content management system, simple, easy to use, secure, stable and free. xyhcms background arbitrary file download vulnerability , attackers can exploit the vulnerability to download sensitive system files...
Arbitrary File Read Vulnerability in iCMS
iCMS is a content management system built with PHP and MySQL. iCMS has an arbitrary file reading vulnerability, which can be exploited by an attacker to read any file on the server and disclose sensitive information...
SQL injection vulnerability in ZZCMS backend zt***_se***.php file (CNVD-2020-25102)
zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the ZZCMS team's backend ztse.php file, which can be exploited by an attacker to obtain sensitive information from the database...
WCMS suffers from SQL injection vulnerability (CNVD-2020-25555)
WCMS is an open source lightweight CMS system. WCMS suffers from an SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in AlpacaCMS
AlpacaCMS is an open source lightweight tree CMS system . It is based on php+mysql and b2core MVC as the underlying architecture . AlpacaCMS SQL injection vulnerability , an attacker can exploit the vulnerability to obtain database data...
File upload vulnerability in jizhicms
jizhicms is an open source cms developed by Langfang Extreme Networks Technology Co. jizhicms has a file upload vulnerability that can be exploited by an attacker to gain server administrator privileges...
QCMS is vulnerable to XSS
QCMS website management system is a PHP lightweight system developed through MVC architecture. An XSS vulnerability exists in the QCMS backend, which can be exploited by attackers to obtain user login credentials...
HuCart Enterprise Building System v5.7.7 has file upload vulnerability
HuCart is a PHP+Mysql based enterprise building system CMS that can run on various server platforms such as Linux and Windows. A file upload vulnerability exists in HuCart Enterprise CMS v5.7.7, which can be exploited by attackers to upload arbitrary files...
File Deletion Vulnerability in YCCMS Controller Directory Na***.class.php
YCCMS is a PHP version of a lightweight CMS builder. A file deletion vulnerability exists in the YCCMS controller directory Na.cl.php, which can be exploited by an attacker to delete any file in any directory...
HDWPlayer SQL Injection Vulnerability in Joomla!
Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! HDWPlayer. An attacker can exploit this vulnerability to execute illegal SQL commands...
CMSmap
It is an offensive tool for web application security testing. The primary CVE ID is not present in the provided context, but the tool is designed to automate the process of detecting security flaws in popular Content Management Systems CMSs such as WordPress, Joomla, Drupal, and Moodle. The tool,...
SQL Injection Vulnerability in LJCMS
LJCMS adopts PHP + Mysql architecture, is a very SEO friendly, full-featured, safe and stable, support multi-terminal display and extremely simple to use enterprise station building system. LJCMS has SQL injection vulnerability, attackers can use the vulnerability to obtain database information...
XSS Vulnerability in Extreme CMS
Extreme CMS is open source and free PHPCMS web content management system. Extreme CMS has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...
CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2020-21240)
CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in Filemanager...