EUVD-2021-34800

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in...

Evolution CMS 跨站脚本漏洞

Evolution CMS is an open source PHP-based content management system CMS. Evolution CMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the uid parameter, which can be exploited by an attacker to execute...

Evolution CMS 跨站脚本漏洞

Evolution CMS is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in Evolution CMS version 2.0.2, which can be exploited by an attacker to cause a cross-site scripting vulnerability via the Document Manager feature...