MetInfo System URL Redirection Vulnerability

MetInfo is a Content Management System CMS developed using PHP and Mysql. A redirection vulnerability exists in MetInfo 5.3.17 and earlier versions. An attacker constructs a malicious URI and induces the user to parse it, which can redirect the user to any WEB site for phishing attacks...

CVE-2016-6133

CVE-2016-6133 is an XSS vulnerability in Ektron Content Management System (pre-9.1.0.184SP3 / 9.1.0.184.3.127) where an attacker can inject arbitrary script via the rptStatus parameter in WorkArea/SelectUserGroup.aspx. Public details (PacketStorm) show affected version 9.10SP1 (build 9.1.0.184) a...

Joomla! Releases Security Update

Joomla! has released version 3.7.4 of its Content Management System CMS software to address several vulnerabilities. A remote attacker could exploit some of these vulnerabilities to take control of an affected website. US-CERT encourages users and administrators to review the Joomla! Security...

Tilde CMS 1.01 - Multiple Vulnerabilities

Tilde CMS 1.01 - Multiple Vulnerabilities Exploit Title: Tilde CMS 1.01 Multiple Vulnerabilities Date: July 7th, 2017 Exploit Authors: Paolo Forte, Raffaele Forte Vendor Homepage: http://www.tildenetwork.com/ Version: Tilde CMS 1.0.1 Tested on: Ubuntu 12.04, PHP 5.3.10 I. INTRODUCTION...

MetInfo cross-site scripting vulnerability (CNVD-2017-25435)

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo version 5.3.17. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via Client-IP or X-Forwarded-For HTTP packet headers...

Henan Xuecheng Software Website Group Content Management System Exists SQL Injection Vulnerability

Henan Xuecheng Software Co., Ltd. website group content management system is a website building system. A SQL injection vulnerability exists in the content management system of Henan Xuecheng Software Co. The vulnerability exists in /cms/template/InfoShowDefault.js. An attacker can exploit the...

XSS Vulnerability in X6CMS

X6CMS, the full name of Xiaoliu Website Content Management System. X6CMS is a fully functional marketing website management platform with PHP+MYSQL architecture. X6CMS has XSS vulnerability. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

CMS Made Simple Upload Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMSMS version...

CVE-2017-9609

Cross-site scripting XSS vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the maplanguage parameter to backend/pages/langsettings.php...

PT-2017-11761 · Bolt · Bolt Cms

Name of the Vulnerable Software and Affected Versions: Bolt CMS version 3.2.14 Description: The issue allows stored XSS via text input, as demonstrated by the Title field of a New Entry. This can be exploited by injecting malicious code into the text input fields. Recommendations: For Bolt CMS...

MetInfo Code Execution Vulnerability

MetInfo is a Content Management System CMS developed using PHP and Mysql. An arbitrary code execution vulnerability exists in MetInfo version 5.3.17. A remote attacker can exploit this vulnerability to create PHP scripts with malicious images...

FineCMS Arbitrary Code Execution Vulnerability

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. An arbitrary code execution vulnerability exists in FineCMS version 2.1.0. A remote attacker can exploit this vulnerability to execute arbitrary PHP code...

Arbitrary Code Execution Vulnerability in S-CMS class.asp

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS class.asp has an arbitrary code execution vulnerability that can be exploited by attackers to execute arbitrary code...

[SECURITY] Fedora 26 Update: drupal7-7.56-1.fc26

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

e107 v2 Bootstrap CMS - CSRF Web Vulnerability

Document Title: =============== e107 v2 Bootstrap CMS - CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2083 Release Date: ============= 2017-07-06 Vulnerability Laboratory ID VL-ID: ==================================== 2083 Commo...

e107 v2 Bootstrap CMS - CSRF Web Vulnerability

Document Title: =============== e107 v2 Bootstrap CMS - CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2083 Release Date: ============= 2017-07-05 Vulnerability Laboratory ID VL-ID: ==================================== 2083 Commo...

[SECURITY] Fedora 25 Update: drupal7-7.56-1.fc25

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

CVE-2016-6201

CVE-2016-6201 affects Ektron Content Management System (CMS) before 9.1.0.184 SP3. The flaw allows remote attackers to inject arbitrary web script/HTML via the ContType parameter in ViewContentByCategory under WorkArea/content.aspx, i.e., a cross-site scripting (XSS) vector. The vulnerability is ...

CVE-2016-6201

Cross-site scripting XSS vulnerability in Ektron Content Management System CMS before 9.1.0.184 SP3 9.1.0.184.3.127 allows remote attackers to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx...

Reflective Cross-site Scripting Vulnerability in Five Fingers CMS System

Five Fingers CMS is an open source content management system suitable for portals, corporate website builders, mobile websites and microblogging promotion. Five Fingers CMS system version v4.0.0 reflective cross-site scripting vulnerability, attackers by inserting XSS malicious code to perform...