Arbitrary File Read Vulnerability in DSCMS

DSCMS is an enterprise website system launched by Changsha Deshaun Network Technology Co. DSCMS has an arbitrary file reading vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in the Frontend of DSCms Enterprise Content Management System

DScms is using PHP + Mysql architecture, it is a cms building system for enterprise website construction. A command execution vulnerability exists in the frontend of the DSCms enterprise site content management system. An attacker can exploit the vulnerability to gain server privileges...

CVE-2018-18317

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...

CVE-2018-18317

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...

Cross site request forgery (csrf)

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...

CVE-2018-18317

DESHANG DSCMS 1.1 contains a cross-site request forgery (CSRF) vulnerability exposed via the public/index.php/admin/admin/add.html URI. A remote attacker can perform unauthorized operations through this endpoint. The CVE CVE-2018-18317 is documented in NVD with CVSSv2 base score 6.8 (Partial conf...

CVE-2018-18317

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...

PT-2018-14401

Name of the Vulnerable Software and Affected Versions DESHANG DSCMS version 1.1 Description The issue is related to a CSRF problem. It affects the "public/index.php/admin/admin/add.html" URI. Recommendations For DESHANG DSCMS version 1.1, consider implementing proper CSRF protection mechanisms to...

CVE-2018-18317: Cross-Site Request Forgery (CSRF)

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...

SQL Injection Vulnerability in Dscms

Dscms is an enterprise website builder based on TP5.0 framework development, using PHP + Mysql architecture. Dscms 0.1 version of the front-end SQL injection vulnerability, the vulnerability stems from the failure to filter the parameter $id, attackers can use the vulnerability to obtain sensitiv...