Command Execution Vulnerability in Metinfo 5.3.10 CMS Latest Version

MetInfo is an enterprise website building software that supports multi-terminal display and is easy to use. A command execution vulnerability exists in the latest version of Metinfo 5.3.10 CMS, which can be exploited by attackers to execute arbitrary commands...

SetucoCMS Information Disclosure Vulnerability

SetucoCMS is a content management system CMS. A security vulnerability exists in SetucoCMS. An attacker could exploit the vulnerability to disclose or modify information...

Wolf CMS 0.8 Cross Site Scripting

Title Wolf CMS 0.8 - Stored Cross-Site Scripting XSS Vulnerability + Credit Mattia Reggiani [email protected] + Advisory https://github.com/mattiareggiani/Security-Advisories/blob/master/MR-16-03WolfCMS.pdf + Vendor Homepage https://www.wolfcms.org/ + Affected Version 0.8 + Tested on Ubuntu...

Diasite CMS Cross-Site Scripting Vulnerability

Diasite CMS is a web management tool that provides multiple services. Cross-site scripting vulnerabilities exist in the q parameter of the Rechercher-14-0-0-0.html page of Diasite CMS that stem from the program failing to adequately filter user-submitted input. An attacker could exploit these...

ZZCMS 7.1 Multiple Arbitrary File Deletion Vulnerabilities

Z Station Chief Merchants Content Management System ZZCMS developed by the ZZCMS team, incorporating database optimization, content caching, AJAX and other technologies,, open source, independent functional modules, to facilitate secondary development. ZZCMS 7.1 version of the existence of multip...

JVN#80157683: SetucoCMS multiple vulnerabilities

SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains multiple vulnerabilities listed below. Cross-site request forgery - CVE-2016-4891 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...

phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability

Product & Service Introduction: =============================== phpCollab is an open source internet-enabled system for use in projects that require collaboration over the internet. Those organizations, such as consulting firms, that rely on a division between firm-side and client-side informatio...

KWSPHP CMS v1.6.995 - Persistent Cross Site Vulnerability

Product & Service Introduction: =============================== KwsPHP fully configurable Site. Our links and official banners. KwsPHP is a CMS Content Management System or content management system. Discover its major assets as of the installation: an installation of ease via an ergonomic...

SQL Injection Vulnerability in Baishuo Networks CMS Management System

The cms management system is a content management system for text processing, image processing, flash animation, sound and video streaming, images and even email archives. Baishuo network cms management system has SQL injection vulnerability, id parameter filtering is not strict leading to sql...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08860)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to perform unauthorize...

3Webs CMS SQL Injection Vulnerability

3Webs CMS is a content management system. 3Webs CMS suffers from a SQL injection vulnerability that can be exploited by an attacker via a SQL injection command, resulting in the disclosure of database information...

Contrexx CMS GOV Module OnlineDesk SQL Injection Vulnerability

Contrexx is an open source content management system. A SQL injection vulnerability exists in the Contrexx CMS GOV module OnlineDesk, which can be exploited by an attacker to transfer the Id parameter of the egov module to the database, resulting in the disclosure of database information...

RealEstate CMS 3.00.50 Cross Site Scripting

i?Document Title: =============== RealEstate CMS 3.00.50 - Cross Site Web Vulnerability Release Date: ============= 2016-09-08 Vulnerability Disclosure Timeline: ================================== 2016-09-23 : Public Disclosure Product & Service Introduction: ===============================...

BageCms content management system background arbitrary file download vulnerability

BageCMS is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system backend arbitrary file download vulnerability , allowing attackers to exploit the vulnerability can download any file in the server...

PHPCMS V9 ipbanned.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 ipbanned.php file, which allows attackers to exploit the vulnerability to...

Exponent CMS SQL Injection Vulnerability (CNVD-2016-07937)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...

SQL Injection Vulnerability in the VoteId Parameter of Hopping Collaborative Content Management System (CCMS)

HZCMS is a website group content management system based on Java and XML technology. A SQL injection vulnerability exists in the voteId parameter of the HZCMS. An attacker can exploit the vulnerability to obtain database information...

EaseUS CMS Message Storage Type Cross-site Scripting Vulnerability

EECO CMS is a marketing enterprise website system based on SEO development. A stored cross-site scripting vulnerability exists in the EE CMS message, due to the program not filtering the title and so on. Allow attackers to exploit the vulnerability to carry out cross-site attacks...

SQL Injection Vulnerability in hdcms Framework rname Parameter

HDCMS is a content management system package written in PHP. A SQL injection vulnerability exists in the rname parameter of the hdcms framework, as the program fails to adequately filter the rname parameter and only does corresponding code auditing on the source code. An attacker is allowed to...

phpCollab CMS 2.5 Cross Site Request Forgery

Document Title: =============== phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1911 Release Date: ============= 2016-08-17 Vulnerability Laboratory ID VL-ID: ====================================...