Code Execution Vulnerability in SDCMS V1.8

SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A code execution vulnerability exists in SDCMS V1.8, which can be exploited by an attacker to gain server privileges...

Logic Flaw Vulnerability in sdcms V1.8

SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. A logic flaw vulnerability exists in sdcms V1.8, which can be exploited by attackers to obtain sensitive information...

SDCMS has an xss vulnerability

SDCMS is a PHP and MySQL based enterprise station building content management system CMS from China Fireworks Network Technology Company. An xss vulnerability exists in SDCMS, which can be exploited by an attacker to obtain an administrator cookie...

SQL Injection Vulnerability in SDMCS V1.1 Frontend

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDMCS V1.1 SQL injection vulnerability exists in the front-end, due to the system does not effectively filter the data submitted by the user, the attacker can exploit the vulnerability to obtain sensitiv...

SDCMS Search Box SQL Injection Vulnerability

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. An SQL injection vulnerability exists in the SDCMS search box. The vulnerability stems from failure to filter user input. An attacker can exploit this vulnerability to obtain sensitive information from t...