Hot Drama CMS v2.1 has a flawed logic vulnerability

Hot Drama CMS is a movie and TV station building system developed by PHP+MySQL. There is a logic flaw vulnerability in /admin/cm.php in Hot Drama CMS v2.1, which can be exploited by an attacker to log in to the administration background by modifying the cookie value...

XSS Vulnerability in Hot Drama CMS v2.1

Hot Drama CMS is a movie and TV station building system developed by PHP+MySQL. A stored xss injection vulnerability exists in /wap/book.php in Hot Drama CMS v2.1, which can be exploited by attackers to obtain an administrator cookie...