Unrestricted file upload

Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file upload vulnerability, which can be exploited by an attacker to gain control of the server...

CVE-2022-28120

Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file upload vulnerability, which can be exploited by an attacker to gain control of the server...

CVE-2022-28120

The CVE-2022-28120 entry concerns Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0. A vulnerability in the file upload feature allows an attacker to gain control of the server. The root cause is described in connected sources...

Arbitrary File Read Vulnerability in e-office of Shanghai Panavision Network Technology Co.

e-office is a standard collaborative mobile office platform. Ltd. e-office has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in e-office of Shanghai Panavision Network Technology Co. Ltd (CNVD-2022-43244)

e-office is a standard collaborative mobile office platform. Ltd. e-office has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in e-office of Shanghai Panmicro Network Technology Co.

e-office is a standard collaborative mobile office platform. Ltd. e-office suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

DouPHP Cross-Site Scripting Vulnerability (CNVD-2022-72218)

A cross-site scripting vulnerability exists in DouPHP, a lightweight enterprise content management system CMS from China DouShell Network Technology. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in the upload function of dmin/show.php. An...

Arbitrary File Deletion Vulnerability in DSCMS of Changsha Desha Network Technology Co.

Dscms is a set of open source projects based on Thinkphp3.1+Bootstrap. Changsha Deshaun Network Technology Co., Ltd DSCMS arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete arbitrary files...

SQL Injection Vulnerability in UFIDA U8-OA Enterprise Edition (CNVD-2022-31182)

UFIDA Network Technology Corporation is an enterprise cloud services and software provider. A SQL injection vulnerability exists in UFIDA U8-OA Enterprise Edition, which can be exploited by attackers to obtain sensitive database information...

EyouCms安全漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms, which originates from eyouCMS V1.5.5-UTF8-SP31 Deletion of arbitrary files due to insufficient parameter...

DouPHP Cross-Site Scripting Vulnerability (CNVD-2022-03909)

DouPHP is a lightweight enterprise content management system CMS from China DouShell Network Technology, Inc. A cross-site scripting vulnerability exists in DouPHP, which stems from a lack of data validation filtering of user-supplied and output data in /admin/cloud.php. An attacker could exploit...

S-CMS XML External Entity Injection Vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS 3.0 version of the /api/notify.php exists XML external entity injection vulnerability. An attacker can use this vulnerability to read arbitrary files...

S-CMS SQL Injection Vulnerability (CNVD-2021-93907)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. a SQL injection vulnerability exists in the 4.edu.phpconnfunction.php component of S-CMS version 1.0. An attacker can use this vulnerability to access sensitive...

Eyoucms Cross-Site Scripting Vulnerability (CNVD-2022-13193)

Zanzan Network Technology EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Zanzan Network Technology in China.Eyoucms 1.4.7 and previous versions have a cross-site scripting vulnerability, which stems from the fact that the addonfieldext parameter is not validate...

EyouCms Cross-Site Scripting Vulnerability

EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Hainan Zanzan Network Technology Co. An attacker can use the vulnerability to execute arbitrary web scripts or HTML...

Eyoucms Cross-Site Scripting Vulnerability (CNVD-2022-13194)

Zanzan Network Technology EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Zanzan Network Technology in China. version v1.4.1 of Eyoucms has a security vulnerability. An attacker can use the vulnerability to execute arbitrary web scripts or HTML...

Nature Easy Soft Network Technology ZenTao 代码问题漏洞

Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes product management, project management, quality management and document management functions. ...

S-CMS Cross-Site Scripting Vulnerability (CNVD-2021-58260)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites...

S-CMS Remote Code Execution Vulnerability (CNVD-2021-94956)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. a remote code execution vulnerability exists in /1.com.php in S-CMS version 3.0 PHP version. An attacker can exploit the vulnerability by modifying PHP files to get ...

S-CMS Cross-Site Scripting Vulnerability (CNVD-2021-58259)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. /app/formadd/ in S-CMS 3.0 has a stored cross-site scripting vulnerability that can be exploited to execute arbitrary Web scripts or HTML via the title entry text bo...