SQL Injection Vulnerability in CMS of Shanghai Seek Creative Technology Co.

Ltd. specializes in providing customers with high-end website planning, website construction, website design, brand network marketing and related Internet-based application services. A SQL injection vulnerability exists in the CMS of Shanghai Seek Creative Technology Co., Ltd, which can be...

Epignosis eFront CMS Path Traversal Vulnerability

Epignosis eFront CMS is an online learning system with an Ajax interface from Epignosis, USA. The system allows you to create and manage courses with tools such as a content editor, file manager, and digital library. A path traversal vulnerability exists in Epignosis eFront CMS 3.6.15.4 and earli...

Visual Calendar SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. Visual Calendar is one of the visual calendar plug-in . A SQL injection vulnerability exists in Joomla! Visual Calendar version 3.1.3. A remote...

Arbitrary File Upload Vulnerability in UCMS

UCMS is a simple open source content management system. UCMS has an arbitrary file upload vulnerability that allows an attacker to log in to the background and upload arbitrary files to gain control of the web server...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2018-02621)

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site scripting vulnerability exists in CMS Made Simple CMSMS 2.2.5. The vulnerability can be exploited to conduct cross-site scripting attacks via the m1messages...

711cms V1.0.5 has a directory traversal vulnerability

711cms is the first open source cms for APP application market, pc station + wap station + APP native client three stations in one, to provide a complete APP application market construction, operation and promotion of one-stop solution. 711cms V1.0.5 version of the existence of directory traversa...

SQL Injection Vulnerability in CMS of Shenzhen Aipres Technology Co.

Ltd. is engaged in website construction, enterprise application software development, enterprise network brand integration of enterprise "brand" management one-stop solution. Ltd. building CMS there are SQL injection vulnerabilities, attackers can use the vulnerability to access or modify the...

YzmCMS_v3.6 Arbitrary File Deletion Vulnerability

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMSv3.6 has an arbitrary file deletion vulnerability. Attackers by cracking the background default account password , construct URL...

Zenario v7.6 CMS - SQL Injection Web Vulnerability

Document Title: =============== Zenario v7.6 CMS - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2043 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5960 CVE-ID: ======= CVE-2018-5960 Release Date: ===========...

Directory Traversal Vulnerability in ICMS Content Management System

ICMS is an efficient and simple content management system built with PHP and MySQL. A directory traversal vulnerability exists in the ICMS content management system, which can be exploited by an attacker to obtain the directory structure of the server...

Piwigo 2.8.2 / 2.9.2 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Document Title: =============== Piwigo v2.8.2 & 2.9.2 CMS - Multiple Cross Site Vulnerabilities Vulnerability Class: ==================== Cross Site Scripting - Non Persistent Current Estimated Price: ======================== 500a! - 1.000a!...

Kentico CMS 11.0 Stack Buffer Overflow

Document Title: =============== Kentico CMS v11.0 - Stack Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1943 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5282 CVE-ID: ======= CVE-2018-5282 Release Date:...

Piwigo 2.8.2 / 2.9.2 Cross Site Scripting

Document Title: =============== Piwigo v2.8.2 & 2.9.2 CMS - Multiple Cross Site Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2005 Release Date: ============= 2018-01-12 Vulnerability Laboratory ID VL-ID:...

Kentico CMS 11.0 - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Document Title: =============== Kentico CMS v11.0 - Stack Buffer Overflow Vulnerability CVE-ID: ======= CVE-2018-5282 Vulnerability Class: ==================== Buffer Overflow Current Estimated Price: ======================== 2.000€ - 3.000€...

Kentico CMS 11.0 - Buffer Overflow

Document Title: =============== Kentico CMS v11.0 - Stack Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1943 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5282 CVE-ID: ======= CVE-2018-5282 Release Date:...

X6CMS backend has arbitrary file deletion vulnerability

X6CMS, fully known as Xiaoliu Website Content Management System, is a full-featured marketing website management platform with PHP+MYSQL architecture, built-in SEO optimization mechanism in the whole station, simple interface and convenient operation. X6CMS V2.220130305 version of the background...

Icyphoenix 2.2.0.105 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Icyphoenix 2.2.0.105 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2006 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5697 CVE-ID: ======= CVE-2018-5697 Release Date:...

CVE-2017-1000454

CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1...

CVE-2017-1000453

CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution...

CMS Made Simple has an unspecified vulnerability (CNVD-2017-37769)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple...