DhCms Cross-Site Scripting Vulnerabilities

DhCms Dinghua Cloud CMS is a content management system based on PHP and MySQL. A cross-site scripting vulnerability exists in Dhcms 2017-09-18. The vulnerability could allow a remote malicious user to execute arbitrary code...

CVE-2020-19274: Improper Neutralization of Input During Web Page Generation

A Cross SIte Scripting XSS vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious user execute arbitrary code...

SQL Injection Vulnerability in dhcms Frontend

dhcms is an enterprise building system. A SQL injection vulnerability exists in the frontend of dhcms, which can be exploited by attackers to obtain sensitive database information...

Code execution vulnerability in dhcms

dhcms is an enterprise building system. A code execution vulnerability exists in dhcms, which can be exploited by an attacker to execute code...

Cross site scripting

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS...

CVE-2019-9550

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS...

CVE-2019-9550

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS...

CVE-2019-9550

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS...

CVE-2019-9550

CVE-2019-9550 affects DhCms (DhCms through 2017-09-18) with an XSS in admin.php?r=admin/Index/index. The root cause is a stored/reflected XSS in the admin backend, enabling an attacker to potentially obtain cookie information (per CNVD-2019-08720). Multiple sources (NVD, Red Hat, CNVD) report the...

CVE-2019-9550: Improper Neutralization of Input During Web Page Generation

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS...

PT-2019-19701

Name of the Vulnerable Software and Affected Versions DhCms through 2017-09-18 Description The issue is related to an XSS in the admin.php?r=admin/Index/index page. Recommendations For DhCms versions through 2017-09-18, update to a version released after 2017-09-18 to resolve the issue...