SQL Injection Vulnerability in RPCMS

RPCMS is a lightweight php content management system, which can be used as a blogging system and so on. RPCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

RPCMS has a file upload vulnerability

RPCMS is a lightweight php content management system, which can be used as a blog system, corporate website system, etc. RPCMS has a file upload vulnerability that can be exploited by attackers to gain server privileges...

Command Execution Vulnerability in DHCMS

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Arbitrary File Deletion Vulnerability in SECMS

SECMS is an open source PHP content management system. SECMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete files and cause a system reinstallation...

Arbitrary File Deletion Vulnerability in Catfish CMS

Catfish CMS is an open source and free PHP content management system. An arbitrary file deletion vulnerability exists in the Catfish CMS backend. An attacker can exploit the vulnerability to delete arbitrary files...

Incorrect ACL Check Vulnerability in Joomla!

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An incorrect ACL checking vulnerability exists in Joomla! 3.0.0 - 3.9.24. An...

XSS Vulnerability in CatfishCMS 5.5.3

Catfish catfish CMS is open source free PHP content management system. Catfishcms V5.5.3 has an xss vulnerability that can be exploited by attackers to obtain user cookie information...

OIC Exponent CMS Input Validation Error Vulnerability (CNVD-2021-02030)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...

CatfishCMS suffers from a logic flaw vulnerability (CNVD-2020-73469)

CatfishCMS is a PHP content management system does not require a high depth of expertise easy to build the site using simple to adapt to different needs. CatfishCMS has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

Drupal Command Injection Vulnerability

Drupal is an open source content management system developed by the Drupal community using the PHP language. A security vulnerability exists in Drupal versions 8.8.x before 8.8.8, 8.9.x before 8.9.1, and 9.0.x before 9.0.1. An attacker can exploit the vulnerability to execute code with the help o...

PHPCMS suffers from SQL injection vulnerability

PHPCMS uses OOP object-oriented approach to the independent development of the framework. The framework is easy to expand, stable and with ultra-powerful load capacity, can fully meet the government agencies, educational institutions, institutions, commercial enterprises, individual webmasters...

SQL Injection Vulnerability in zzzcms sa***.php Page

zzcms is a PHP and MYSQL based CMS. A SQL injection vulnerability exists in the zzzcms sa.php page, which can be exploited by an attacker to obtain sensitive information from the database...

Command Execution Vulnerability in vaeThink

vae Think is a lightweight, high speed PHP content management framework built on Layui and tp5. vaeThink suffers from a command execution vulnerability that can be exploited by attackers to gain server privileges...

CVE-2018-20012

PHPCMF 4.1.3 has XSS via the first input field to the index.php?s=member&c=register&m=index URI...

PHPCMS ty***.php file suffers from a code injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A code injection vulnerability exists in the PHPCMS ty.php file. An attacker can exploit the vulnerability to write arbitrary...

PHP7CMS frontend Se***.php file has SQL injection vulnerability

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. PHP7CMS foreground Se.php file exists SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

PT-2018-12490 · Phpcms · Phpcms

Name of the Vulnerable Software and Affected Versions: PHPCMS version 9.6.0 Description: The issue allows remote attackers to upload and execute arbitrary PHP code. This can be achieved by sending a .txt?.php.jpg URI in the SRC attribute of an IMG element within infocontent JSON data to the...

PHPCMS V9 has a design flaw

PHPCMS is a content management system. A design vulnerability exists in the uc function under PHPCMS V9 yoursite\phpssoserver\phpcms\modules\admin\system.php, which can be exploited by attackers to gain control of the web server...

SQL Injection Vulnerability in hdcms Framework rname Parameter

HDCMS is a content management system package written in PHP. A SQL injection vulnerability exists in the rname parameter of the hdcms framework, as the program fails to adequately filter the rname parameter and only does corresponding code auditing on the source code. An attacker is allowed to...

GeniXCMS 0.0.1 - Multiple Vulnerabilities

Exploit for php platform in category web applications GeniXCMS v0.0.1 Remote Unauthenticated SQL Injection Exploit Vendor: MetalGenix Product web page: http://www.genixcms.org Affected version: 0.0.1 Summary: GenixCMS is a PHP Based Content Management System and Framework CMSF. It's a simple and...