CVE-2022-33085

ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...

EUVD-2020-10824

Malware in sbrugna...

EUVD-2020-12914

Malware in sbrugna...

EUVD-2022-36141

Malicious code in bioql PyPI...

CVE-2023-23007

An issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL injection vulnerability in the function node where members are added...

CVE-2020-18913

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

CVE-2020-20125

EARCLINK ESPCMS-P8 contains a cross-site scripting XSS vulnerability in espcmsweb\espcmsload.php...

CVE-2019-5488

EARCLINK ESPCMS-P8 has SQL injection in the installpack/index.php?ac=Member=verifyAccount verifykey parameter. installpack/espcmspublic/espcmsdb.php may allow retrieving sensitive information from the ESPCMS database...

CVE-2022-33085

ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...

CVE-2022-33085

ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...

Remote code execution

ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...

CVE-2022-33085

ESPCMS P8 is affected by an authenticated remote code execution (RCE) vulnerability in the fetch_filename function under espcms_public/espcms_templates/ESPCMS_Templates. The Red Hat advisory and related records corroborate the issue, describing an authenticated RCE path via that function. No prod...

CVE-2020-20125

EARCLINK ESPCMS-P8 contains a cross-site scripting XSS vulnerability in espcmsweb\espcmsload.php...

CVE-2020-20125

EARCLINK ESPCMS-P8 contains a cross-site scripting XSS vulnerability in espcmsweb\espcmsload.php...

CVE-2020-20125

The provided evidence centers on CVE-2020-20125 affecting EARCLINK ESPCMS-P8. A cross-site scripting (XSS) vulnerability is reported in espcms_web\espcms_load.php. Documents do not specify the exact root cause, affected versions, exploitation details, or mitigations. The connected sources confirm...

EARCLINK ESPCMS 跨站脚本漏洞

Honghu Erchuang Netlink Information Technology EARCLINK ESPCMS is an enterprise website builder from Honghu Erchuang Netlink Information Technology Company in China. A cross-site scripting vulnerability exists in EARCLINK ESPCMS-P8, which stems from a cross-site scripting XSS vulnerability...

CVE-2020-18913

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

Sql injection

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

Command Execution Vulnerability in Espcms P8 Backend of Honghu Erchuang Netlink Information Technology Co.

ESPCMS-P8 enterprise station management system using PHP + MySQL development, after 6 generations of development, the current ESPCMS-P8 platform stability and can be developed independently of the maturity of the platform, which supports enterprise news and product releases, talent recruitment,...

SQL Injection Vulnerability in ESPCMS-P8 Enterprise Website Management System

ESPCMS-P8 enterprise station management system is developed by PHP+MySQL, which supports enterprise news and product release, talent recruitment, download, independent form management, online message, online ordering, inquiry and membership and other related enterprise website functions. There is...