Arbitrary File Editing Vulnerability in UCMS Version 1.4.6

UCMS is a simple open source content management system, which can be used to quickly develop a variety of enterprise stations, article stations and station systems. UCMS version 1.4.6 \ucms\sadmin\fi.php page arbitrary file editing vulnerability. An attacker can exploit the vulnerability to edit...

CMS BUZZ 2.9 Cross Site Scripting

Title: ======= CMS BUZZ 2.9 - Reflected Cross-Site Scripting Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CM...

QCMS Cross-Site Request Forgery Vulnerability

QCMS is an open source content management system CMS for creating responsive websites. A cross-site request forgery vulnerability exists in QCMS 3.0.1, which can be exploited by remote attackers to perform unauthorized operations with the help of the backend/user/admin/add.html URI...

QCMS cross-site scripting vulnerability (CNVD-2019-10276)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/system.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2018-14976

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS...

CVE-2018-14975

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS...

CVE-2018-14971

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS...

CVE-2018-14970

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS...

Arbitrary File Read Vulnerability in BageCM v3.1.3

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCM v3.1.3 suffers from an arbitrary file reading vulnerability. The vulnerability is due to the template management function does not strictly filter the parameters, an attacker can use t...

SQL Injection Vulnerability in the Registration Module of Guowei CMS School Cluster System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system registration module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

Arbitrary File Read Vulnerability in Metinfo 6.0.0 Backend

MetInfo is a content management system developed using PHP and Mysql. An arbitrary file read vulnerability exists in the Metinfo version 6.0.0 backend. An attacker can exploit the vulnerability to read sensitive files on a website...

MiniCMS has multiple vulnerabilities

miniCMS a mini content management system designed for personal websites. MiniCMS has multiple vulnerabilities that can be exploited by attackers to obtain sensitive information on a website...

Command Execution Vulnerability in AppCMS Backend Template Management Service

APPCMS is a professional APP content management system that provides a variety of extension modules, such as information, recommended positions, topics, friendly links, body internal links and so on, to help webmasters better personalize their own websites. A command execution vulnerability exist...

CVE-2018-14334

manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of control. Consequently, one can upload and execute a .php file, a similar issue to CVE-2018-8766...

ONELAN CMS Arbitrary File Upload Vulnerability

ONELAN Content Management System CMS is a content management system. An arbitrary file upload vulnerability exists in ONELAN CMS, which could be exploited by an attacker to upload arbitrary files to the system...

ONELAN CSM File Read Vulnerability

ONELAN Content Management System CMS is a content management system. A file read vulnerability exists in ONELAN CSM that could allow an authenticated user to access arbitrary files in the / data directory of the system...

Code execution vulnerability in xdcms

xdcms is a fully open source and general purpose content management system. A code execution vulnerability exists in xdcms. The vulnerability is due to the background configuration page fails to completely filter the content submitted by the administrator due to the attacker can be exploited to...

NUCMS V1.1 SQL Injection Vulnerability in Backend

NUCMS content management system is an open source website management system. NUCMS V1.1 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

AT&T Bizcircle - Persistent Profile Cross Site Vulnerability

Document Title: =============== AT&T Bizcircle - Persistent Profile Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2108 AT&T Reference ID: 1502971499862 Vulnerability Magazine:...

Arbitrary File Deletion Vulnerability in ZZCMS Version 8.3

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. An arbitrary file deletion vulnerability exists in ZZCMS version 8.3. An attacker can exploit the vulnerability to delete arbitrary files...