XYHCMS Cross-Site Request Forgery Vulnerability

XYHCMS is an open source content management system CMS. A cross-site request forgery vulnerability exists in XYHCMS version 3.5. A remote attacker can exploit this vulnerability by sending an index.php?g=Manage&m=Rbac&a=addUser request to add an administrator account...

Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2018-08255)

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in Monstra CMS version 3.0.4. The vulnerability can be exploited ...

SQL Injection Vulnerability in CMS of Wuhan Tengfei Liren E-commerce Co.

Wuhan Tengfei Liren E-commerce Co. A SQL injection vulnerability exists in the CMS of Wuhan Tengfei Liren E-commerce Co. An attacker can exploit this vulnerability to obtain sensitive information in the database...

CMS Made Simple admin/moduleinterface.php Reflective Cross-Site Scripting Vulnerability

CMS Made Simple is a content management system developed using PHP, MySQL and Smarty template engine. A reflected cross-site scripting vulnerability exists in admin/moduleinterface.php in CMS Made Simple 2.2.7. The vulnerability can be exploited to conduct cross-site scripting attacks via the...

CMS Made Simple admin/moduleinterface.php Cross-Site Request Forgery Vulnerability

CMS Made Simple is a content management system developed using PHP, MySQL and Smarty template engine. A cross-site request forgery vulnerability exists in admin/moduleinterface.php in CMS Made Simple 2.2.7. No detailed vulnerability details are provided at this time...

[SECURITY] Fedora 26 Update: drupal7-7.58-1.fc26

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

CVE-2018-9923

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...

Kentico Information Disclosure Vulnerability

Kentico is the United States Kentico Software Inc. based on a set of ASP.NET content management system CMS. A security vulnerability exists in version 9.0 of Kentico prior to 9.0.51 and version 10.0 prior to 10.0.48. A remote attacker can exploit this vulnerability to gain global administrator...

CMS Made Simple suffers from an administrator password reset vulnerability

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. An administrator password reset vulnerability exists in CMS Made Simple. An attacker can use this vulnerability to reset the administrator password and gain administrator log...

Code Execution Vulnerability in the Backend of POSCMS V3.2.18 Build 2018-03-26 Free Edition

POSCMS is an open source cross-platform web content management system developed by Php+Mysql. A code execution vulnerability exists in the backend of POSCMS V3.2.18 Build 2018-03-26 Free Edition. The vulnerability is due to improper filtering of user input in the backend, allowing an attacker to...

Multiple Vulnerabilities in OTCMS Version 3.20

OTCMS is an article-based web content management system CMS. Cross-site scripting, absolute path disclosure, and SQL injection vulnerabilities exist in OTCMS version 3.20. A remote attacker can inject malicious web script or HTML by adding keywords or links to articles, and then exploit the...

C5Scan - Vulnerability Scanner And Information Gatherer For The Concrete5 CMS

Vulnerability scanner and information gatherer for the Concrete5 CMS. Is a little out of date presently pending a refactor. concrete5 is an open-source content management system CMS for publishing content on the World Wide Web and intranets. concrete5 is designed for ease of use, for users with a...

GetSimple CMS 3.3.13 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: GetSimple CMS 3.3.13 - Cross Site Scripting Vulnerability Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://get-simple.info/ Software Link: http://get-simple.info/download/ Affected...

GetSimple CMS 3.3.13 - Cross-Site Scripting

GetSimple CMS 3.3.13 - Cross-Site Scripting Exploit Title: GetSimple CMS 3.3.13 - Cross Site Scripting Vulnerability Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://get-simple.info/ Software Link:...

[SECURITY] Fedora 28 Update: drupal7-7.58-1.fc28

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

GetSimple CMS Cross-Site Scripting Vulnerability

Cagintranet Networks GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in the...

OpenCMS 10.5.3 Cross Site Request Forgery

Exploit Title: OpenCMS 10.5.3 Multiple Cross Site Request Forgery Vulnerabilities Injection Google Dork: N/A Date: 02-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://www.opencms.org/en/ Software Link:...

SQL Injection Vulnerability in CMS, a Personal Card Issuing Platform Program

Personal card issuance platform program source code is a PHP + MySQL development of card issuance platform source code. A SQL injection vulnerability exists in the Personal Card Issuing Platform program CMS. The vulnerability stems from the program's failure to perform effective filtering. An...

Debian DLA-1325-1 : drupal7 security update (Drupalgeddon 2)

Jasper Mattsson found a remote code execution vulnerability in the Drupal content management system. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised. For further information please refer to the...

OTCMS cross-site scripting vulnerability (CNVD-2018-06876)

OTCMS is an article-based web content management system CMS. A cross-site scripting vulnerability exists in OTCMS version 3.20. A remote attacker can inject malicious web script or HTML by adding keywords or links to articles...