QCMS suffers from a file upload vulnerability (CNVD-2020-26541)

QCMS is an open source content management system for creating responsive websites. QCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of a web server...

Arbitrary File Read Vulnerability in QCMS

QCMS is an open source content management system for creating responsive websites. QCMS suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

XSS vulnerability in XYHCMS backend

XYHCMS is an open source CMS content management system. XYHCMS XSS vulnerability exists in the background , an attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

QCMS Arbitrary File Read Vulnerability

QCMS is an open source content management system CMS for creating responsive websites from China's Velvet Ease Technology Corporation. A security vulnerability exists in the system/controller/backend/template.php file in the QCMS v3.0.1 version of VelvetEase Technology. An attacker can exploit th...

File upload vulnerability in zzphp backend

zzphp is a content management system CMS. A file upload vulnerability exists in the zzzphp backend, which can be exploited by attackers to upload arbitrary php malicious code...

PYSEC-2020-219

In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other users 2FA devices by going to the correct path. The user does not require special permissions in order to do so. By deleting the other users device they can disable the target users 2FA devices and potentially...

Joomla! cross-site scripting vulnerability (CNVD-2020-21001)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions 3.0.0 through 3.9.15. The vulnerability stems from a lack of proper validation of...

OneThink Pu***.cl***.php file suffers from a universal password bypass vulnerability

OneThink is an open source content management framework. A universal password bypass vulnerability exists in the OneThink Pu.cl.php file. An attacker can exploit the vulnerability to obtain data-sensitive information...

SQL injection vulnerability in the us***.cl***.php file of YIXUNCMS enterprise website builder system

YIXUNCMS enterprise website construction system is a set of display website system developed by Yixun Software Studio for small and medium-sized enterprises. There is a SQL injection vulnerability in the us.cl.php file of YIXUNCMS enterprise website builder system. Attackers can use the...

Arbitrary File Deletion Vulnerability in CLTPHP Backend

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. An arbitrary file deletion vulnerability exists in the CLTPHP backend. An attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary File Deletion Vulnerability in SeaCMS Backend

SeaCMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. An arbitrary file deletion vulnerability exists in the SeaCMS backend. An attacker can exploit this vulnerability to delete arbitrary files on the web server...

CmsEasy has a logic flaw vulnerability

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...

S-CMS fo***.php suffers from SQL Injection Vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS fo.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

115CMS suffers from a file upload vulnerability (CNVD-2020-20191)

115CMS is a content management system developed with ThinkPHP framework. 115CMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of a web server...

Arbitrary file reading vulnerability in zzzzphp

zzphp is a content management system CMS. An arbitrary file read vulnerability exists in zzzphp, which can be exploited by an attacker to read arbitrary files to obtain sensitive information...

The vulnerability of the software processing module in the Plone content management system allows attackers to enhance their privileges.

The vulnerability of the Plone content management system’s software processing module is related to errors in processing the plone.app.contenttypes package. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

SQL Injection Vulnerability in xyhCMS of Kunming Yuntao Technology Co. Ltd (CNVD-2020-22707)

XYHCMS is a completely open source CMS content management system, simple, easy to use, secure, stable and free. Kunming Yuntao Technology Co. xyhCMS SQL injection vulnerability, attackers can exploit the vulnerability to obtain database privileges...

Command Execution Vulnerability in seacms Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the seacms backend. An attacker can exploit this vulnerability to gain control of the web server...

XSS Vulnerability in Yunye CMS

Yunye CMS is developed by Yunye Information Technology is a specialized for small and medium-sized enterprise website construction of php open source CMS. Yunye CMS has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...

Command Execution Vulnerability in eyoucms Frontend

Eyoucms is based on TP5.0 framework for the core development of free + open source enterprise content management system . Children's foreign trade responsive English website template comes with eyoucms core. eyoucms front-end command execution vulnerability , attackers can use the vulnerability t...