4389 matches found
XSS Vulnerability in LJCMS
LJCMS is a free and open source content management system. LJCMS suffers from an XSS vulnerability that can be exploited by attackers to inject arbitrary web script or HTML...
WBCE CMS File Rename Filter Bypass Vulnerability
WBCE CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in the admin/media/rename.php file in WBCE CMS 1.4.0 and earlier versions. An attacker can exploit the vulnerability to rename media file names and extensions to execute arbitrary PHP...
LJCMS has an override access vulnerability
LJCMS is a free and open source content management system. LJCMS suffers from an override access vulnerability that can be exploited by attackers to obtain sensitive information...
File Upload Vulnerability in UQCMS
UQCMS is an easy-to-use B2B2C multi-store system based on PHP+MySql. A file upload vulnerability exists in UQCMS, which can be exploited by attackers to obtain sensitive information...
JIZHICMS Cross-Site Request Forgery Vulnerability
Extreme Networks Technology JIZHICMS Extreme CMS is a set of open source content management system CMS of China Extreme Networks Technology. A cross-site request forgery vulnerability exists in JIZHICMS version 1.5.1, which can be exploited by remote attackers to add administrators...
Code execution vulnerability in HkCMS backend Ad***.php file
HkCMS is a free and open source content management system, the core of the Thinkphp5.0 framework and many other open source software, has been committed to providing free and open source content management system for enterprise building station. HkCMS backend Ad.php file has a code execution...
File Upload Vulnerability in ZZZCMS
ZZZCMS enterprise station system using PHP + MYSQL language development, is a set of mature and perfect CMS system, the cover is fully functional, customization of powerful, scalable, high security, can easily solve most of the enterprise station needs. ZZZCMS file upload vulnerability, attackers...
MetInfo SQL Injection Vulnerability (CNVD-2019-34803)
MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. An attacker can exploit this vulnerability to execute illegal SQL commands...
MetInfo SQL Injection Vulnerability (CNVD-2019-34804)
MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. An attacker can exploit this vulnerability to execute illegal SQL commands...
CVE-2019-17369
OTCMS v3.85 has CSRF in the admin/memberdeal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin...
Arbitrary file deletion vulnerability in Bacardi CMS pi***.php page
Bacardi CMS micro-mall is a free and open source object-oriented multi-store multi-user micro-mall PHP development framework , created in June 2014 , follow the Apache Licence2 open source agreement released , is to quickly simplify the development of enterprise micro-mall applications , to help...
SilverStripe License Issues Vulnerabilities
SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . An authorization issue vulnerability exists in SilverStripe 4.3.3 and earlier versions...
File Upload Vulnerability in HKCMS
HkCMS has been committed to providing free and open source content management system for enterprise station building, HkCMS has excellent expansion and secondary development capabilities, can be adapted to enterprise lightweight system development and deployment. HKCMS file upload vulnerability,...
Arbitrary Deletion Vulnerability in HongCMS v4.0 uc_a***.php File
HongCMS is an open source lightweight content management system CMS. HongCMS v4.0 uca.php file contains an arbitrary deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files, resulting in a system reinstallation...
Code execution vulnerability in HongCMS (CNVD-2019-40719)
HongCMS is an open source lightweight content management system CMS. A code execution vulnerability exists in HongCMS. An attacker can exploit this vulnerability to gain server privileges...
HongCMS suffers from an arbitrary file deletion vulnerability (CNVD-2019-40717)
HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...
Code Execution Vulnerabilities in the Background of Wild Rain Novel CMS
Wild Rain Fiction Content Management System provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Rain Novel cms backend code execution vulnerabilities , attackers can use the vulnerability to obtain server privileges...
YCCMS v3.3 Arbitrary File Deletion Vulnerability
YCCMS is a PHP version of a lightweight CMS builder. YCCMS v3.3 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...
S-CMS enterprise website builder system aj***.php page C_f*** parameter has SQL injection vulnerability
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website building system aj.php page Cf parameters exist SQL injection vulnerability, attackers can use the...