PHPCMS SQL Injection Vulnerability (CNVD-2022-43217)

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules for news, images, downloads, information, products, etc. A security vulnerability exists in PHPCMS v1.0, which stems from the category parameter in categorymenu.php. No detailed vulnerabilit...

Command Execution Vulnerability in BossCMS of Wenzhou Huyin Information Technology Co. Ltd (CNVD-2022-20212)

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. A command execution vulnerability exists in BossCMS, which can be exploited by attackers to gain server privileges...

Arbitrary File Deletion Vulnerability in BossCMS of Wenzhou Huanxin Information Technology Company Limited (CNVD-2022-21724)

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. BossCMS has an arbitrary file deletion vulnerability, which can be exploited to delete any file on the server...

XSS Vulnerability in BossCMS of Wenzhou Huyin Information Technology Co. Ltd (CNVD-2022-21727)

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. There is an XSS vulnerability in BossCMS, which can be exploited by attackers to obtain sensitive information such as user cookies...

Command Execution Vulnerability in BossCMS of Wenzhou Huyin Information Technology Co.

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. A command execution vulnerability exists in BossCMS, which can be exploited to gain server privileges...

XSS Vulnerability in BossCMS of Wenzhou Huyin Information Technology Co.

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. There is an XSS vulnerability in BossCMS, which can be exploited by attackers to obtain sensitive information such as user cookies...

Unauthorized Access Vulnerability in BossCMS

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. An unauthorized access vulnerability exists in BossCMS, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Upload Vulnerability in BossCMS

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. BossCMS has an arbitrary file upload vulnerability that can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in Cruising Cloud Light Forum System

Cruise Cloud Light Forum System is Java+MySQL architecture, adaptive to cell phones and computers and so on. A command execution vulnerability exists in the Patrol Cloud Light Forum system, which can be exploited by attackers to gain server control privileges...

BlueCMS suffers from a command execution vulnerability (CNVD-2021-48546)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

BlueCMS suffers from a command execution vulnerability (CNVD-2021-48545)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-48548)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2021-40495)

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. YzmCMS 5.8 version of the /admin/systemmanage/userconfigedit.html page there is a cross-site scripting vulnerability, an attacker can use the vulnerability to inject...

SQL Injection Vulnerability in CmsEasy of Siping Jiuzhou Yitong Technology Co. Ltd (CNVD-2021-40740)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-40144)

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

MetInfo File Modification Vulnerability

MetInfo adopts PHP+Mysql architecture, it is a cms building system which is very friendly to SEO, fully functional, supports multi-language, responsive display, and extremely suitable for enterprise and company website construction. A file modification vulnerability exists in MetInfo 7.0 beta. An...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2021-34497)

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. A stored cross-site scripting vulnerability exists in the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter in YzmCMS version 5.6. The vulnerabilit...

Command Execution Vulnerability in CmsEasy (CNVD-2021-34045)

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy suffers from a command execution vulnerability that can be exploited by attackers to gain control of the server...

BlueCMS v1.6 sp1 Has Arbitrary File Deletion Vulnerability

bluecms is an application for local classifieds portal system , the development language architecture is php + mysql architecture. BlueCMS v1.6 sp1 there are arbitrary file deletion vulnerability, attackers can use the vulnerability to achieve arbitrary file deletion...

SeaCMS suffers from SQL injection vulnerability (CNVD-2021-17447)

SeaCMS is a web content management system based on PHP MYSQL architecture and can run across platforms. SeaCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...