Rainy novel cms 1.2.2 background template management function there are directory traversal vulnerabilities

Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. A directory traversal vulnerability exists in the backend template management feature of Drizzle Novel cms 1.2.2. Attackers can use the vulnerability to view file...

SQL Injection Vulnerability in the Raining Novels cms Ne***.phpp File

Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. A SQL injection vulnerability exists in the Ne.phpp file of the Drizzle Novel cms. An attacker can exploit this vulnerability to obtain database information...