SQL Injection Vulnerability in LJCMS

LJCMS is a free and open source content management system. LJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information...

File upload vulnerability in DocCms2016 backend

DocCms is an official release on November 11, 2012, is located in the enterprise, webmasters, developers, network companies, VI planning and design companies, SEO promotion and marketing companies, website beginners and other users tailored to build a new enterprise station, content management...

SQL injection vulnerability in zzcms 2019 backend ( CNVD-2019-37718)

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable protection. Open source, independent functional modules, to...

CVE-2019-16655

joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...

File upload vulnerability in webplus pro

Webplus pro is a content management system. A file upload vulnerability exists in webplus pro, which can be exploited by an attacker to gain server privileges...

Directory Traversal Vulnerability in Xunrui CMS Backend Pages

Sichuan Xunruiyun Software Development Co., Ltd. is an Internet enterprise focusing on providing informatization services for small and medium-sized enterprises, mainly engaged in PHP language CMS website management system, offline communication and information engineering, online and offline...

Total.js CMS Elevation of Privilege Vulnerability

Total.js CMS is a Node.js content management system. Total.js CMS 12.0.0 suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain access to other resources by calling the associated API...

File Upload Vulnerability in DTcms (DTcms)

Qihang content management system DTcms is a domestic based on ASP.NET C + MSSQL ACCESS open source website management system . DTcms has a file upload vulnerability that can be exploited by attackers to gain server privileges...

Command Execution Vulnerability in Xunrui CMS

Xunrui CMS content management framework is based on PHP7 language using the latest CodeIgniter4 as a development framework for the production of web content management framework, providing "computer site + mobile site + APP interface" integrated web technology solutions. A command execution...

S-CMS News Portal System Backend aj***.php N_t*** Parameter Exists SQL Injection Vulnerability

S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. S-CMS news portal system background aj.php Nt parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Enterprise Content Management System Monitor

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and 7 that is used by IBM Enterprise Content Management System Monitor. These issues were disclosed as part of the IBM Java SDK updates in Jan 2017. Vulnerability Details CVEID: CVE-2016-5546 DESCRIPTION: A...

SQL Injection Vulnerability in TurboECM Content Management System ti*** Page of Jiangsu Tide Technology Co.

Ltd. is a company dedicated to the research and product development of Internet content data management, mining, analysis and application technology. A SQL injection vulnerability exists in the TurboECM content management system ti page of Jiangsu Tide Technology Co. Ltd, which can be exploited b...

Code Execution Vulnerability in ZZCMS2019

ZZCMS with product investment templates, you can quickly build product investment website. For example, the pharmaceutical investment industry, health care investment industry, cosmetics investment industry, agricultural investment industry, pregnancy and child investment industry, alcohol and fo...

Information leakage vulnerability in webplus pro

Webplus pro is a content management system. An information disclosure vulnerability exists in webplus pro, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in UCMS Content Management System

UCMS is a simple open source content management system. UCMS content management system has a file upload vulnerability that can be exploited by attackers to gain server privileges...

ZZZCMS V1.7.1 version exists arbitrary file reading vulnerability

ZZZCMS enterprise station system using PHP + MYSQL language development, is a set of mature and perfect enterprise station CMS system, the cover is fully functional, customization of powerful, scalable, high security, can easily solve most of the enterprise station needs. ZZZCMS V1.7.1 version of...

ZZCMS SQL Injection Vulnerability (CNVD-2019-24373)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in ZZCMS 8.3 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this...

Arbitrary File Deletion, Code Execution Vulnerabilities in ICMS

ICMS is a high content management system built with PHP and MySQL. ICMS suffers from an arbitrary file deletion, code execution vulnerability. An attacker can exploit this vulnerability to delete arbitrary files and gain control of the website...

Ovidentia Cross-Site Scripting Vulnerability

Ovidentia is an open source content management system and collaboration platform based on PHP and MySQL by the French CANTICO team, which can be used for publishing and managing projects, publication and article management, schedule sharing, and more. A cross-site scripting vulnerability exists i...

Babel Input Validation Error Vulnerability

Babel is a multilingual support module for use in content management systems. An input validation error vulnerability exists in Babel. The vulnerability arises from a network system or product that does not properly validate input data...