SQL Injection Vulnerability in UsualToolCMS

UsualToolCMS UTCMS is a content management system and rapid site building framework. Using template separation technology , support the creation of a variety of application platforms . Support for secondary development , rich template language and API for developers to call . UsualToolCMS SQL...

Arbitrary File Read Vulnerability in HkCMS

HkCMS has been committed to providing free and open source content management system for enterprise station building, HkCMS has excellent expansion and secondary development capabilities, can be adapted to enterprise lightweight system development and deployment. HkCMS arbitrary file reading...

HkCMS suffers from an arbitrary file download vulnerability

HkCMS has been committed to providing free and open source content management system for enterprise station building, HkCMS has excellent expansion and secondary development capabilities, can be adapted to enterprise lightweight system development and deployment. HkCMS arbitrary file download...

SQL Injection Vulnerability in Super CMS da***.ma***.php

Super CMS content management system in order to solve the problem of website optimization and development of a set of products, it is an efficient open source content management system, the product is based on PHP + MYSQL architecture, can run on Windows, Linux, MacOSX, Solaris and other various...

SQL Injection Vulnerability in ED01-CMS

ED01-CMS is a content management system. ED01-CMS suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information about an administrator...

Code Execution Vulnerability in KiteCMS Backend

KiteCms is an open source content management system based on ThinkPHP 5.0.9. A code execution vulnerability exists in the KiteCMS backend. An attacker can construct a directory structure to execute arbitrary code and gain server privileges...

thejshen Globitek CMS 1.4 - (id) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: thejshen Globitek CMS 1.4 - 'id' SQL Injection Exploit Author: Cakes Vendor Homepage: https://github.com/thejshen/contentManagementSystem Software Link: https://github.com/thejshen/contentManagementSystem.git Version: 1.4 Tested...

YXcms background there are arbitrary file deletion vulnerability

YXcms is a PHP and MySQL based enterprise building content management system CMS. An arbitrary file deletion vulnerability exists in the YXcms backend. An attacker can exploit the vulnerability to delete arbitrary files read into the directory...

TYPO3 Information Disclosure Vulnerability (CNVD-2019-40297)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. An information disclosure vulnerability exists in TYPO3, which arises from errors in configuration and other errors in the operation of a networked system or product, and can be exploited b...

XSS Vulnerability in ED01-CMS Content Management System

ED01-CMS is a content management system. An XSS vulnerability exists in the ED01-CMS content management system, which can be exploited by attackers to obtain sensitive information such as cookies...

XSS Vulnerability in ED01-CMS

ED01-CMS is a content management system and the CMS project of Edwin Diaz's Udemy course "PHP for Beginners - Become a PHP Master". An XSS vulnerability exists in the ED01-CMS content management system, which can be exploited by attackers to obtain sensitive information such as cookies...

Code execution vulnerability in seacms backend (CNVD-2019-43686)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms, which can be exploited by attackers to gain server privileges...

Worry-free cms has arbitrary file deletion vulnerability

Worry-free cms is one of the most professional, most used, most widely used small website builder system for small and medium-sized enterprises to build their own website. Worry-free cms arbitrary file deletion vulnerability, an attacker can take advantage of the vulnerability to arbitrary file...

Tiki Wiki CMS Groupware File Inclusion Vulnerability

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A file inclusion vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which can be exploited by an attacker to include arbitrary files...

Reinstallation Vulnerability in S-CMS Enterprise Website Builder System

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a reinstallation vulnerability in S-CMS, which can be exploited by attackers to reinstall the system...

Joomla Object Injection

Added: 10/24/2019 Background Joomla is a content management system written in PHP. Problem An object injection vulnerability in Joomla could allow a remote, unauthenticated attacker to execute arbitrary commands on the server. This vulnerability has been nicknamed "Rusty Joomla". Resolution Upgra...

Code Execution Vulnerability in UCMS Backend File Management

UCMS is a simple open source content management system. A code execution vulnerability exists in the UCMS backend file management, which can be exploited by an attacker to gain control of the web server...

SQL Injection Vulnerability in OurPHP ou***_pa***.php Page

OurPHP is a web content management system developed using the PHP language. An SQL injection vulnerability exists in the OurPHP oupa.php page, which can be exploited by attackers to obtain sensitive information...

PowerCMS Open Redirect Vulnerability

PowerCMS is a content management system. An open redirection vulnerability exists in PowerCMS, which can be exploited by an attacker to redirect users to arbitrary websites...

Command Execution Vulnerability in Pluck-CMS

Pluck is a very simple and easy to use CMS Content Management System for PHP platforms. A command execution vulnerability exists in Pluck-CMS, which can be exploited by an attacker to execute remote code to gain privileges in a web application...