EmpireCMS suffers from a code execution vulnerability (CNVD-2021-17381)

EmpireCMS Empire Content Management System is an open source content management system CMS. A code execution vulnerability exists in EmpireCMS 7.5, which can be exploited by an attacker to gain control of the server...

EmpireCMS is vulnerable to XSS

EmpireCMS is a content management system CMS. EmpireCMS suffers from an XSS vulnerability. An attacker can exploit this vulnerability to obtain sensitive information such as user cookies...

File Deletion Vulnerability in EmpireCMS of Dixing Software Development Co.

EmpireCMS is a content management system CMS. EmpireCMS has a file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Command Execution Vulnerability in Empire CMS v7.5 Backend

EmpireCMS Empire Content Management System is an open source content management system CMS. A command execution vulnerability exists in the Empire CMS v7.5 backend, which can be exploited by an attacker to gain access to the web server...

EmpireCMS is vulnerable to information leakage

EmpireCMS is a content management system CMS. EmpireCMS suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in EmpireCMS Li***.php File

EmpireCMS is a content management system CMS. An SQL injection vulnerability exists in the EmpireCMS Li.php file, which can be exploited by attackers to obtain sensitive information...

Remote Code Execution Vulnerability in EmpireCMS

EmpireCMS is a content management system CMS. EmpireCMS suffers from a remote code execution vulnerability that can be exploited by an attacker to gain control of the web server...

SQL Injection Vulnerability in EmpireCMS cl***.php File

EmpireCMS is a content management system CMS. An SQL injection vulnerability exists in the EmpireCMS cl.php file, which can be exploited by attackers to obtain sensitive information...

SQL injection vulnerability in EmpireCMS cl***.php file (CNVD-2019-43134)

EmpireCMS is a content management system CMS. An SQL injection vulnerability exists in the EmpireCMS cl.php file, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in EmpireCMS

EmpireCMS is a website building system for Empire Software, a technology company that specializes in web software development. EmpireCMS has a command execution vulnerability that can be exploited by an attacker to execute arbitrary code...

Unauthorized Access Vulnerability in EmpireCMS

EmpireCMS Empire Content Management System is an open source content management system CMS. EmpireCMS has an unauthorized access vulnerability that can be exploited by attackers to view sensitive information...

EmpireCMS cross-site scripting vulnerability (CNVD-2019-16987)

EmpireCMS Empire Content Management System is an open source content management system CMS. A cross-site scripting vulnerability exists in the admindbDoSql.php file in EmpireCMS 7.5 and earlier versions, which can be exploited by an attacker to execute client-side code...

EmpireCMS Code Injection Vulnerability

EmpireCMS Empire Content Management System is an open source content management system CMS. A code injection vulnerability exists in the admindbDoSql.php file in EmpireCMS 7.5 and earlier versions, which can be exploited by an attacker to generate illegal code snippets that modify the intended...

CVE-2018-19462

admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code via SQL injection that uses a .php filename in a SELECT INTO OUTFILE statement to admin/admin.php...

CVE-2018-19462

admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code via SQL injection that uses a .php filename in a SELECT INTO OUTFILE statement to admin/admin.php...

CVE-2018-19461

admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php...

Cross site scripting

admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php...

Sql injection

admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code via SQL injection that uses a .php filename in a SELECT INTO OUTFILE statement to admin/admin.php...

CVE-2018-19461

admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php...

CVE-2018-19461

CVE-2018-19461 affects EmpireCMS (through 7.5 and earlier). A cross-site scripting flaw exists in admin\db\DoSql.php that can be triggered via crafted SQL syntax to admin/admin.php. Affected component is the DoSql.php path; root cause involves improper handling of SQL in that file leading to stor...