CVE-2018-16238

An issue was discovered in damiCMS V6.0.1. Remote code execution can occur via PHP code in a multipart/form-data POST to the admin.php?s=/Tpl/Update.html URI. For example, this can update the Web/Tpl/default/head.html file...

Information disclosure

An issue was discovered in damiCMS V6.0.1. It relies on the PHP time function for cookies, which makes it possible to determine the cookie for an existing admin session via 10800 guesses...

CVE-2018-16238

An issue was discovered in damiCMS V6.0.1. Remote code execution can occur via PHP code in a multipart/form-data POST to the admin.php?s=/Tpl/Update.html URI. For example, this can update the Web/Tpl/default/head.html file...

CVE-2018-16239

An issue was discovered in damiCMS V6.0.1. It relies on the PHP time function for cookies, which makes it possible to determine the cookie for an existing admin session via 10800 guesses...

Design/Logic Flaw

An issue was discovered in damiCMS V6.0.1. Remote code execution can occur via PHP code in a multipart/form-data POST to the admin.php?s=/Tpl/Update.html URI. For example, this can update the Web/Tpl/default/head.html file...

CVE-2018-16237

An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=Tpl/Add/id/c:|windows|win.ini URI...

CVE-2018-16239

DamiCMS v6.0.1 is affected by a cookie-generation flaw where the application relies on PHP time() to create admin cookies, enabling an attacker to guess the admin session cookie within 10,800 attempts and achieve elevation of privileges. The issue is documented across multiple sources (CNVD-2019-...

CVE-2018-16238

An issue was discovered in damiCMS V6.0.1. Remote code execution can occur via PHP code in a multipart/form-data POST to the admin.php?s=/Tpl/Update.html URI. For example, this can update the Web/Tpl/default/head.html file...

CVE-2018-16237

Summary: CVE-2018-16237 affects damiCMS 6.0.1. The vulnerability is a directory traversal in admin.php, exploitable via the s parameter (example: s=Tpl/Add/id/c:|windows|win.ini), allowing reading arbitrary files. Root cause: input handling that permits traversal using the '|' character. Reported...

CVE-2018-16238

The vulnerability CVE-2018-16238 affects damiCMS v6.0.1. A remote attacker can achieve remote code execution by sending PHP code in a multipart/form-data POST to the admin.php?s=/Tpl/Update.html URI, which can modify files such as Web/Tpl/default/head.html. The cited sources (NVD/CNVD and related...

CVE-2018-16239

An issue was discovered in damiCMS V6.0.1. It relies on the PHP time function for cookies, which makes it possible to determine the cookie for an existing admin session via 10800 guesses...

CVE-2018-16237

An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=Tpl/Add/id/c:|windows|win.ini URI...

DamiCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-16532)

DamiCMS is a content management system CMS for building websites quickly. A cross-site request forgery vulnerability exists in DamiCMS version 6.0.0. A remote attacker can exploit this vulnerability to change the password of the administrator account with the help of the /admin.php?s=/Admin/doedi...

Cross site request forgery (csrf)

An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit...

CVE-2018-15844

An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit...

CVE-2018-15844

An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit...

CVE-2018-15844

An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit...

CVE-2018-15844

DamiCMS 6.0.0 is affected by a Cross-Site Request Forgery vulnerability that can change the administrator password via /admin.php?s=/Admin/doedit. Root cause identified as CSRF in the admin password edit flow; PoC and public writeups exist (e.g., Exploit-DB record for 6.0.0 CSRF). The vulnerabili...

DamiCMS has an arbitrary file write vulnerability

DamiCMS is a content management system CMS for building websites quickly. DamiCMS v6.0.0 version exists arbitrary file write vulnerability, the vulnerability stems from the template editing page fails to strictly detect the file name suffix, an attacker can exploit the vulnerability to write...

DamiCMS has an arbitrary file deletion vulnerability

DamiCMS is a content management system CMS for building websites quickly. DamiCMS v6.0.0 has an arbitrary file deletion vulnerability, the vulnerability stems from the failure to filter file parameters in the file deletion operation on the template edit page, which can be exploited by an attacker...