Rabbit Movie CMS has xss vulnerability

Rabbit TV CMS is an open source content building system. A cross-site scripting vulnerability exists in Rabbit Movie CMS. Attackers can use this vulnerability to embed malicious code in web pages to obtain users' personal information or steal administrator cookie information...

File Upload Vulnerability in SDCMSV1.8

Based on Php+MySql environment, it is developed to integrate computer website, mobile website and micro letter public number management system. SDCMSV1.8 has a file upload vulnerability that can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in Super Cms Backend

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

idreamsoft iCMS Cross-Site Scripting Vulnerability (CNVD-2019-12119)

iCMS is an efficient and simple content management system built with PHP and MySQL. A cross-site scripting vulnerability exists in app/search/search.app.php in idreamsoft iCMS 7.0.14, which can be exploited by an attacker via the public/api.php?app=search q parameter...

idreamsoft iCMS Cross-Site Scripting Vulnerability (CNVD-2019-12120)

iCMS is an efficient and simple content management system built with PHP and MySQL. A cross-site scripting vulnerability exists in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14, which can be exploited by an attacker via the admincp.php?app=config tab parameter...

File upload vulnerability in PHPOK ap***.php

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in PHPOK ap.php, which can be exploited by attackers to gain control of the web server...

SQL Injection Vulnerability in ESPCMS in***.php Page

ESPCMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the ESPCMS in.php page, which can be exploited by attackers to obtain sensitive information...

iCMS has an xss vulnerability

iCMS is a content management system CMS built with PHP and MySQL databases. iCMS suffers from an xss vulnerability that can be exploited by attackers to inject arbitrary web script or HTML...

Joomla FacileForms SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla FacileForms. Due to the program adequately filtering user-supplied data before using it in SQL queries. Allows an attacker to compromise the application, access or modify data, or exploit...

Directory Traversal Vulnerability in SDCMS

SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. SDCMS has a directory traversal vulnerability that can be exploited by an attacker to traverse the directory and obtain sensitive information...

MKCMS Cross-Site Request Forgery Vulnerability

MKCMS is a content management system. A cross-site request forgery vulnerability exists in MKCMS version 5.0. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker can exploit the vulnerability to send an...

SAP BASIS Authorization Issues Vulnerability

SAP BASIS is a content management system. SAP BASIS is vulnerable to an authorization issue. An attacker could exploit this vulnerability to gain unauthorized access and obtain sensitive information...

UKcms Cross-Site Request Forgery Vulnerability

Lingji Network Technology UKcms is a PHP-based content management system CMS by China Lingji Network Technology. A cross-site request forgery vulnerability exists in UKcms v1.1.10, which originates from a WEB application that does not adequately validate whether a request comes from a trusted use...

S-CMS SQL Injection Vulnerability (CNVD-2019-14076)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS PHP v1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute...

Fedora Update for drupal7 FEDORA-2019-2fbce03df3

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: drupal7-7.65-1.fc29

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

ZZZCMS zzzphp code injection vulnerability

ZZZCMS zzzphp is a content management system CMS. A code injection vulnerability exists in ZZZCMS zzzphp v1.6.3, which originates from a network system or product that does not properly filter specific elements of externally entered data during the construction of a code segment. An attacker can...

FlatCore Arbitrary File Upload Vulnerability

flatCore is a lightweight content management system CMS based on PHP and SQLite. A security vulnerability exists in the acp/acp.php file in flatCore version 1.4.7. No details of the vulnerability are provided at this time...

File upload vulnerability in tx***_fi***.php file in TextpatternCMS backend

TextpatternCMS is a content management system written in PHP. A file upload vulnerability exists in the txfi.php file in the backend of TextpatternCMS. It allows an attacker to upload a webshell and gain server privileges...

S-CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-08730)

S-CMS is a content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in S-CMS PHP v1.0, which can be exploited by remote attackers to add the admin user with the help of the 4.edu.php/admin/ajax.php?type=admin&action=add&lang=0 URI...