CVE-2018-18934

PopojiCMS v2.0.1 is affected by CVE-2018-18934. The vulnerability lies in admin_component.php, exploitable through the po-admin/route.php?mod=component&act=addnew URI by using the fupload parameter to upload a ZIP file containing arbitrary PHP code, which is extracted and can be executed. This is...

Media File Manager <= 1.4.2 - Authenticated Multiple Vulnerabilities

Following the PoC you can combine the vulnerabilities to obtain PHP code execution and read sensitive file. By default the File Manager can only be used by Administrator users, however, any user role can be configured to use it. PoC Diretory Trasversal: POST /wordpress/wp-admin/admin-ajax.php...

PT-2018-14730

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description An issue was discovered in the software, where the admin component.php is exploitable via the "po-admin/route.php?mod=component&act=addnew" URI by using the fupload parameter to upload a ZIP file containing...

CVE-2018-18934: Cross-Site Request Forgery (CSRF)

An issue was discovered in PopojiCMS v2.0.1. admincomponent.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload parameter to upload a ZIP file containing arbitrary PHP code that is extracted and can be executed. This can also be exploited via CSRF...

CVE-2018-18942: Unrestricted Upload of File with Dangerous Type

In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter...

Code injection

MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the sitename field in mcconf.php...

CVE-2018-18892

MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the sitename field in mcconf.php...

PT-2018-14713

Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description The issue allows execution of arbitrary PHP code via the sitename parameter in the install.php endpoint, affecting the site name field in mc conf.php. Recommendations For MiniCMS version 1.10, consider...

CVE-2018-18892: Improper Control of Generation of Code

MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the sitename field in mcconf.php...

Code injection

nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.php?action=filemanagerupload URI...

PT-2018-14707

Name of the Vulnerable Software and Affected Versions nc-cms versions prior to 2017-03-10 Description The issue allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature. This can be achieved by uploading a file with a .php filename and setting the Content-Type ...

CVE-2018-18874: Unrestricted Upload of File with Dangerous Type

nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.php?action=filemanagerupload URI...

PT-2018-14687

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.5.2.1935 Description The issue allows remote attackers to execute arbitrary PHP code due to a CSRF vulnerability in the zb users/plugin/AppCentre/theme.js.php file. Recommendations For Z-BlogPHP version 1.5.2.1935, update t...

CVE-2018-18842: Cross-Site Request Forgery (CSRF)

CSRF exists in zbusers/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 Zero, which allows remote attackers to execute arbitrary PHP code...

CVE-2018-18426

s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter...

PT-2018-14453

Name of the Vulnerable Software and Affected Versions s-cms version 3.0 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by placing the malicious code in a crafted User-agent Disallow value in the robots.php txt parameter. Recommendations For s-cms...

CVE-2018-18258

An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.php?r=admini/template/updateTpl&filename= URI...

CVE-2018-18258

CVE-2018-18258 affects BageCMS 3.1.3. The vulnerability allows an attacker to execute arbitrary PHP code on the web server and read any file via the URI index.php?r=admini/template/updateTpl&filename=, indicating a server-side code execution and information disclosure risk. The NVD entry assigns ...

PT-2018-14384

Name of the Vulnerable Software and Affected Versions BageCMS version 3.1.3 Description An issue allows an attacker to execute arbitrary PHP code on the web server and read any file via an index.php?r=admini/template/updateTpl&filename= URI. Recommendations For BageCMS version 3.1.3, as a tempora...

CVE-2018-18258: Improper Control of Generation of Code

An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.php?r=admini/template/updateTpl&filename= URI...