SQL Injection Vulnerability in ZZCMS Version 8.2

Webmaster Merchants Content Management System ZZCMS developed by the ZZCMS team, into the database optimization, content caching, AJAX and other technologies, open source, independent functional modules, to facilitate secondary development. There is a SQL injection vulnerability in ZZCMS version...

CVE-2018-8811

OpenCMS 10.5.3 is affected by a CSRF vulnerability in system/workplace/admin/accounts/user_role.jsp that can lead to privilege escalation by hijacking an admin session. Exploitation requires the attacker to have a CMS account with content-manager privileges; multiple public exploits (Exploit-DB, ...

Th3Inspector - Tool for Information Gathering

Tool For Information Gathering. Usage Short Form| Long Form| Description ---|---|--- -i| --info| Website Information -n| --number| Phone Number Information -mx| --mailserver| Find IP Address And E-mail Server -w| --whois| Domain Whois Lookup -l| --location| Find Website/IP Address Location -c|...

CVE-2018-7893

CMS Made Simple CMSMS 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter...

QCMS cross-site scripting vulnerability (CNVD-2018-06392)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in QCMS version 3.0. A remote attacker can exploit this vulnerability by sending the 'title' parameter to the /guest/index.html URI to obtain a user cookie...

Arbitrary File Upload Vulnerability in CLTPHP Version 5.5.3

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. CLTPHP version 5.5.3 suffers from an arbitrary file upload vulnerability, which allows an attacker to directly upload malicious scripts without any privileges and control the web server...

Arbitrary File Deletion Vulnerability in CLTPHP Version 5.5.3

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. An arbitrary file deletion vulnerability exists in CLTPHP version 5.5.3, which can be exploited by attackers to delete arbitrary files...

SQL Injection Vulnerability in iCMS v7.0.7 search.admincp.php Page

iCMS is a free, clean, efficient, and useful PHP content management system. iCMS v7.0.7 suffers from a SQL injection vulnerability in the search.admincp.php page, which originates from the orderby parameter being brought into the database for execution without any processing. An attacker can...

XSS vulnerability in metinfo version 6.0.0

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo version 6.0.0. The vulnerability occurs because app/system/feedback/web/feedback.class.php fails to properly handle input data. An attacker can exploit this vulnerabili...

File upload vulnerability in QYKCMS version 4.3.2 (CNVD-2018-05664)

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS version 4.3.2 file upload vulnerability exists, the vulnerability stems from the content of the uploaded zip backup file is not filtered, the attacker can use the vulnerability to obtain webshe...

Stored Cross-Site Scripting Vulnerability at jeecms Modify Profile

jeecms is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with payment and financial settlement of the content management system. jeecms modified...

Code Execution Vulnerability in POCMS Program Version v3.2.0 Backend

POSCMS System is a content management system based on the CodeIgniter framework. A code execution vulnerability exists in the backend of POCMS program version v3.2.0, which can be exploited by an attacker to execute code and thus gain control of the server...

Arbitrary File Deletion Vulnerability in iZhanCMS Version v2.1

Love Station CMS is an open source and free CMS content management system. iZhanCMS v2.1 version exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete arbitrary files...

Magento CMS APIs Cross-Site Request Forgery Vulnerability

Magento CMS is an open source PHP e-commerce content management system CMS of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions . A cross-site request forgery vulnerability exists in the Magento CMS APIs, which stems...

Code Execution Vulnerability in xyhcms v3.5

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. xyhcms v3.5 version of the code execution vulnerabilities , attackers can exploit the vulnerability to insert a sentence Trojan horse to obtain the website webshell...

CwCms v1.8 Exists Arbitrary File Write Vulnerability

CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. CwCms v1.8 version of the existence of arbitrary file write vulnerability, the vulnerability is due to the system to write the content of the file and file path failed to effectively...

Code Execution Vulnerability in WANCMS v1.0

WANCMS is a content management system that uses php+mysql program source code. A code execution vulnerability exists in WANCMS v1.0 due to the system failing to effectively filter some input parameter values. An attacker can exploit this vulnerability to upload a Trojan horse file and obtain a...

Yab Quarx 2.4.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications 1. Introduction Vendor : Yab Affected Product : Quarx through 2.4.3 Fixed in : Quarx 2.4.5 and 2.4.6 Vendor Website : https://quarxcms.com/ Vulnerability Type : Persistent XSS Remote Exploitable : Yes CVE External Identifier : CVE-2018-7274 2...

Joomla Aist 2.0 Component - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Aist = 2.0 - SQL Injection Vendor Homepage: http://aist.bmstu.ru/ Software Link: http://aist.bmstu.ru/ Version: = 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5993 Exploit Author: Ihsan...

Information leakage vulnerability in jeecms version 9.2

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...