Cross-site Scripting Vulnerability in DSCms Enterprise Content Management System v1.3

DSCms enterprise station content management system is a enterprise website system launched by Changsha Desha Network Technology Co. DSCms Enterprise Content Management System v1.3 suffers from a cross-site scripting vulnerability, which stems from the failure to filter user-submitted job postings...

Unauthorized Access Vulnerability in DSCms Enterprise Site Content Management System v1.3

DSCms enterprise station content management system is a enterprise website system launched by Changsha Desha Network Technology Co. DSCms Enterprise Station Content Management System v1.3 has an unauthorized access vulnerability, which can be exploited by attackers to modify other users'...

Contao Unauthorized Access Vulnerability

Contao is an open source content management system CMS developed using PHP. The system supports search engine , rights management and CSS framework . An unauthorized access vulnerability exists in Contao, which can be exploited by an attacker to view records that are not open to the attacker...

zzzphp cms arbitrary file deletion vulnerability

zzzphp cms is a PHP-based content management system CMS. An arbitrary file deletion vulnerability exists in the 'delfile' function of the /admin/save.php file in version 1.5.8 of zzzphp cms, which allows a remote attacker to delete files with the help of a mixed upper and lower case extension and...

DoorGets Directory Traversal Vulnerability

doorGets is a content management system CMS. The system supports multiple languages, and system backups and theme changes, etc. A security vulnerability exists in doorGets version 7.0. A remote attacker can exploit the vulnerability to write arbitrary files...

FUEL CMS Cross-Site Scripting Vulnerability

FUEL CMS is a content management system based on CodeIgniter. A cross-site scripting vulnerability exists in FUEL CMS 1.4.3, which can be exploited by an attacker to conduct a cross-site scripting attack via a page title, Meta description, or Meta keyword during page data management...

[SECURITY] Fedora 29 Update: drupal7-7.60-2.fc29

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 28 Update: drupal7-7.60-2.fc28

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

SDCMS Directory Traversal Vulnerability

SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A directory traversal vulnerability exists in the app/plug/attachment/controller/admincontroller.php page in SDCMS version 1.6. The vulnerability can be...

razorCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-26701)

razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. A cross-site request forgery vulnerability exists in the rars/user/data page in razorCMS version 3.4.8. A remote attacker can exploit this...

CVE-2018-19544

JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news...

JEECMS Cross-Site Request Forgery Vulnerability (CNVD-2018-26785)

JEECMS is a set of China Jinlei technology development company using Java language development of content management system CMS. A cross-site request forgery vulnerability exists in JEECMS version 9.3. A remote attacker can exploit this vulnerability to add news with the help of...

arcms unauthorized access vulnerability

arcms is a content management system based on layui and arphp. A security vulnerability exists in arcms 2018-03-19 and earlier versions, which stems from the program failing to authenticate index/main, user/useradd, or img/images. An attacker can exploit the vulnerability to gain unauthorized...

SDCMS Arbitrary Code Execution Vulnerability

SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A security vulnerability exists in SDCMS version 1.6, which uses PHP version 5.x. The vulnerability can be exploited to execute arbitrary code by accessing the...

CVE-2018-19437

UCMS 1.4.7 allows remote authenticated users to change the administrator password because $COOKIE'admin'.cookiehash is used for arbitrary cookie values that are set and not empty...

UCMS Administrator Password Change Vulnerability

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS version 1.4.7, where the vulnerable program uses COOKIE'admin'.cookiehash for arbitrary cookie values. A remote attacker can exploit the vulnerability to change the administrator password...

S-CMS SQL Injection Vulnerability (NVD-C-2018-125521)

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. The search.php in S-CMS 1.5 has a SQL injection vulnerability, which can be exploited by an attacker through the keyword parameter to perform a SQL injecti...

JTBC(PHP) Cross-Site Request Forgery Vulnerability

JTBC PHP is an open source CMS Content Management System. JTBCPHP 3.0.1.7 version of aboutus/manage.php?type=action&action=add cross-site request forgery vulnerability, remote attackers can use the vulnerability to perform unauthorized operations...

XiaoCms File Upload Vulnerability

XiaoCms is a lightweight content management system CMS based on PHP and MySQL and capable of running on Linux, Windows and other platforms. A security vulnerability exists in the admin\controller\uploadfile.php file in XiaoCms version 20141229. A remote attacker can exploit the vulnerability by...

SQL Injection Vulnerability in MetInfo Version 6.1.3

MetInfo is a content management system developed using PHP and Mysql. A SQL injection vulnerability exists in MetInfo version 6.1.3. An attacker can exploit the vulnerability to obtain sensitive database information...