File Upload Vulnerability in QCMS 3.0.1 Backend

QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in QCMS version 3.0.1. An attacker can exploit the vulnerability to forge bypass the background login, upload webshell, and gain server privileges...

SQL Injection Vulnerability in MKCMS 5.0

MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version 5.0, which can be exploited by attackers to obtain sensitive database information...

Placeto CMS Alpha 4 SQL Injection

Placeto CMS Alpha v4 - 'page' SQL Injection Title: Placeto CMS Date: 21.03.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://sourceforge.net/projects/placeto/ Software Link: https://sourceforge.net/projects/placeto/files/alpha-rv.4/placeto.zip Version: Alpha rv.4 Category: Webapps...

Placeto CMS Alpha v4 - 'page' SQL Injection

Placeto CMS Alpha v4 - 'page' SQL Injection Title: Placeto CMS Date: 21.03.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://sourceforge.net/projects/placeto/ Software Link: https://sourceforge.net/projects/placeto/files/alpha-rv.4/placeto.zip Version: Alpha rv.4 Category: Webapps...

Super CMS suffers from a file upload vulnerability (CNVD-2019-10024)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and development of a set of products. Super CMS has a file upload vulnerability that can be exploited by attackers to upload malicious files and gain server privileges...

SQL Injection Vulnerability in the art***.php and con***.php Modules of iCMS

iCMS is an efficient and simple content management system built with PHP and MySQL. The art.php and con.php modules of iCMS have a SQL injection vulnerability module, which can be exploited by attackers to obtain sensitive database information...

eNdonesia Portal 8.7 - Multiple Vulnerabilities

=========================================================================================== Exploit Title: eNdonesia Portal 'banners.php' SQL Inj. Dork: N/A Date: 19-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://www.endonesia.org/ Software Link:...

MKCMS v5.0 has an xss vulnerability

MKCMS is a content management system. MKCMS v5.0 suffers from an xss vulnerability that can be exploited by attackers to obtain an administrator cookie...

File Upload Vulnerability in WTCMS

WTCMS is a content management system CMS based on Thinkphp. WTCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

SQL Injection Vulnerability in MKCMS 5.0 bp***.php Page

MKCMS is a content management system. A SQL injection vulnerability exists in the MKCMS 5.0bp.php page, which can be exploited by an attacker to obtain sensitive information from the database...

File upload vulnerability in OFCMS backend ueditor uploadVideo

OFCMS is a content management system developed based on java technology. A file upload vulnerability exists in the OFCMS backend ueditor uploadVideo, which can be exploited by an attacker to upload a webshell and gain access to the server, posing an information leakage and operational security ri...

File upload vulnerability in OFCMS backend ueditor uploadFIle

OFCMS is a content management system developed based on java technology. There is a file upload vulnerability in OFCMS backend ueditor uploadFIle, which can be exploited by attackers to upload webshell and gain server privileges, posing information leakage and operational security risks...

There is an information leakage vulnerability in dedecms

Dream Content Management System DedeCMS is a PHP open source website management system. DedeCMS suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

OFCMS background upload file upload vulnerability

OFCMS is a content management system developed based on java technology. There is a file upload vulnerability in OFCMS background upload, which can be exploited by attackers to upload webshell and gain server privileges, posing information leakage and operational security risks...

Remote Code Execution Vulnerability in JTBC (PHP) Content Management System

JTBC is an open source and free cross-platform web content management system solution. A remote code execution vulnerability exists in the JTBC PHP content management system. An attacker can exploit this vulnerability to execute arbitrary code...

Directory Traversal Vulnerability in JTBC (PHP) Content Management System

JTBC is an open source and free cross-platform web content management system solution. A directory traversal vulnerability exists in the JTBC PHP content management system. An attacker can exploit this vulnerability to traverse any directory on the server...

Directory Traversal Vulnerability in OFCMS Backend

OFCMS is a content management system developed based on java technology. A directory traversal vulnerability exists in the backend of OFCMS, which can be exploited by an attacker to traverse the directory and obtain sensitive information...

SQL injection vulnerability in iCMS sp***.ad***.php page

iCMS is a free and simple PHP content management system. A SQL injection vulnerability exists in the iCMS sp.ad.php page. An attacker can exploit this vulnerability to obtain sensitive database information...

zzcms cross-site scripting vulnerability (CNVD-2019-13261)

ZZCMS is a content management system CMS by the ZZCMS team in China. A cross-site scripting vulnerability exists in the /uploadimgform.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to inject arbitrary HTML or web scripts with the help of the 'noshuiyin' parameter...

SQL Injection Vulnerability in OFCMS System Management Service

OFCMS is a content management system developed based on java technology. A SQL injection vulnerability exists in the OFCMS system administration, which can be exploited by attackers to obtain sensitive information from the database...