DNN Path Traversal Vulnerability

DNN also known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. A path traversal vulnerability exists in DNN 9.4.4 and earlier versions. The...

E-House CMS of Hainan E&Y Technology Co., Ltd. suffers from a logic flaw vulnerability

EJU real estate system ejucms is a set of localized O2O real estate website platform. Hainan EJU Technology Co., Ltd. ejucms CMS logic flaws exist in the vulnerability, attackers can use the vulnerability to create any directory...

Stored Cross-Site Scripting Vulnerability in LJCMS

LJCMS is a free and open source content management system. A stored cross-site scripting vulnerability exists in LJCMS. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

ZZCMS suffers from SQL injection vulnerability (CNVD-2020-18774)

ZZCMS is a content management system for Merchants Network. ZZCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

php deserialization vulnerability in dsmall v5.0.6 frontend

dsmall mall system is a complete set of B2B2C multi-store mall solution. The system uses the domestic excellent open source framework THinkPHP , H5 end using vue.js , front and back end separation , based on PHP MySQL development , using B/S architecture. dsmall v5.0.6 front-end php deserializati...

AKCMS suffers from a command execution vulnerability (CNVD-2020-10179)

AKCMS is a lightweight content management system based on PHP and MySQL. A command execution vulnerability exists in AKCMS, which can be exploited by attackers to execute commands and gain server privileges...

Arbitrary File Read Vulnerability in AKCMS

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS has an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary files...

WordPress Database Reset Plugin Vulnerability (CVE-2020-7047, CVE-2020-7048)

A vulnerability recently disclosed by Wordfence and published as CVE-2020-7047 and CVE-2020-7048 allows an attacker to take over vulnerable WordPress-based websites. Functionality in the WP Database Reset plugin introduced the vulnerability, which allows any unauthenticated user to reset any tabl...

The State of Vulnerabilities in 2019

As a web application firewall provider, part of our job at Imperva is to continually monitor for new security vulnerabilities. To do this, we use internal software that collects information from various data sources such as vulnerability databases, newsletters, forums, social media and more,...

SQL Injection Vulnerability in CmsEasy

CmsEasy is a web content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in MetInfo us***.cl***.php File

MetInfo is an open source and free CMS building system suitable for enterprise building, MetInfo enterprise website management system is mainly used to build enterprise websites, using PHP + Mysql architecture. MetInfo us.cl.php file SQL injection vulnerability. Attackers can use the vulnerabilit...

BSS Continuity CMS Denial of Service Vulnerability

BSS Continuity CMS is a content management system CMS from BSS UK. A denial of service vulnerability exists in BSS Continuity CMS version 4.2.22640.0. An attacker can exploit this vulnerability to cause the underlying database to run with an overload...

SQL Injection Vulnerability in iCMS Backend da***.ad***.php File

iCMS is a content management system built with PHP and MySQL. A SQL injection vulnerability exists in the iCMS backend da.ad.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Fedora Update for drupal7 FEDORA-2019-4917943339

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for drupal7 FEDORA-2019-5f1a2cc839

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

XSS vulnerability in bluecms website builder system

bluecms enterprise website is an asp+access for the development of enterprise website cms. The bluecms website builder system has an XSS vulnerability that can be exploited by attackers to obtain administrator cookie information...

elaniin CMS 1.0 - Authentication Bypass

elaniin CMS 1.0 - Authentication Bypass Exploit Title: elaniin CMS 1.0 - Authentication Bypass Author: riamloo Date: 2020-01-02 Vendor Homepage: https://elaniin.com/ github == https://github.com/elaniin/ Software Link: https://github.com/elaniin/CMS/archive/master.zip Version: 1 CVE: N/A Tested o...

[SECURITY] Fedora 31 Update: drupal7-7.69-1.fc31

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 30 Update: drupal7-7.69-1.fc30

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

SQL Injection Vulnerability in UsualToolCMS of Chengdu Comfidonte Network Technology Co.

UsualToolCMS UTCMS is a content management system as well as a rapid site building framework. UsualToolCMS by Chengdu Comfidonte Network Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...