CVE-2018-14831

An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI...

EUVD-2018-8090

Malware in sbrugna...

EUVD-2018-6715

Malware in sbrugna...

EUVD-2020-10382

Malware in sbrugna...

EUVD-2018-8091

Malware in sbrugna...

EUVD-2018-7702

Malware in sbrugna...

EUVD-2018-13125

Malware in sbrugna...

EUVD-2018-8089

Malware in sbrugna...

EUVD-2020-14010

Malware in sbrugna...

EUVD-2020-10375

Malware in sbrugna...

EUVD-2018-4981

Malware in sbrugna...

EUVD-2018-8180

Malware in sbrugna...

CVE-2020-18458

Cross Site Request Forgery CSRF vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd...

CVE-2020-18451

Cross Site Scripting XSS vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php...

CVE-2020-21236

A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie...

CVE-2018-20571

DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.\Public\Config\config.ini.php to read the global configuration file...

DamiCMS Cross-site Request Forgery Vulnerability (CNVD-2022-02728)

A security vulnerability exists in DamiCMS v6.0, which originates from the lack of cookie protection in /damicms-master/admin.php?s=/Article/doedit, and could be exploited to compromise and impersonate a user's account by obtaining their session cookie. session cookie to compromise and impersonat...

CVE-2020-21236

A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie...

CVE-2020-21236

A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie...

Design/Logic Flaw

A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie...