CVE-2025-15423

A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2025-15422 EmpireSoft EmpireCMS IP Address connect.php egetip protection mechanism

A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/connect.php of the component IP Address Handler. This manipulation causes protection mechanism failure. The attack may be initiated remotely. The exploit has been published and may ...

EUVD-2019-3997

Malware in sbrugna...

EUVD-2020-15693

Malware in sbrugna...

EUVD-2018-18626

Malware in sbrugna...

EUVD-2018-11151

Malware in sbrugna...

File Upload Vulnerability in EmpireCMS v7.5

EmpireCMS is an open source software program that runs on PHP+MySQL database. A file upload vulnerability exists in EmpireCMS v7.5, which can be exploited by an attacker to gain control of the server...

CVE-2018-16339

An issue was discovered in EmpireCMS 7.0. There is a CSRF vulnerability that can add administrators via upload/e/admin/user/AddUser.php?enews=AddUser...