Company's Recruitment Management System SQL Injection

Description of vulnerability: The Company's Recruitment Management System by: oretnom23 in id=2 of the parameter from viewvacancy app on-page appears to be vulnerable to SQL Injection - Stealing the Password Hashes attacks. The payloads 19424269' or '1309'='1309 and 39476597' or '2917'='2923 were...

YzmCMS Cross-site Request Forgery Vulnerability (CNVD-2021-90912)

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. A cross-site request forgery vulnerability exists in /controller/pay.class.php in YzmCMS version 5.5. An attacker can use this vulnerability to access sensitive componen...

File Upload Vulnerability in Tianmu MVC-HOME Version

Tianmu MVC-HOME Edition is a professional PHP+MYSQL product. A file upload vulnerability exists in Tianmu MVC-HOME Edition, which can be exploited by attackers to upload a webshell and gain server privileges...

WordPress Handsome Testimonials&Reviews plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Handsome Testimonials&Reviews plugin is an application plugin for WordPress. Versions of the WordPress Handsome...

PEEL Shopping SQL Injection Vulnerability (CNVD-2021-61762)

PEEL Shopping is a PHP/MySQL architecture of open source e-commerce system. 9.4.0.1 prior version of PEEL Shopping has a SQL injection vulnerability, which can be exploited by attackers to inject malicious SQL queries and obtain sensitive database information...

Vehicle Parking Management System 1.0 Cross Site Scripting Vulnerability

Vehicle Parking Management System version 1.0 suffers from a persistent cross site scripting vulnerability. Original discovery of persistent cross site scripting in this version is attributed to Tushar Vaidya in February of 2021. Exploit Title: Vehicle Parking Management System - Stored...

Arbitrary File Deletion Vulnerability in Aptar CMS (CNVD-2021-56875)

Aptar CMS website management system adopts PHP+MYSQL technology, supports pseudo-static function, can generate google and baidu maps, supports custom url, keywords and descriptions, and facilitates SEO search. Aptar CMS has an arbitrary file deletion vulnerability that can be exploited by attacke...

HuCart v5.7.9 suffers from SQL injection vulnerability

HuCart is a leading enterprise building system, based on PHP Mysql architecture, can run on Linux, Windows and other various server platforms, regular environment, can support millions of data. HuCart v5.7.9 suffers from a SQL injection vulnerability that can be exploited by attackers to obtain...

SQL Injection Vulnerability in the Classifieds Navigation System of Youk365 Website (CNVD-2021-52070)

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system SQL injection vulnerability , attackers can...

Xiancheng cms exists arbitrary file reading vulnerability

Xiancheng cms is a set of PHP mysql architecture with free open source article management system program. Xiancheng cms arbitrary file read vulnerability, attackers can use the vulnerability to obtain sensitive information...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-51280)

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Information Disclosure Vulnerability in ESPCMS Professional Edition

ESPCMS is a PHP MYSQL based enterprise building management system. An information disclosure vulnerability exists in ESPCMS Professional, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Ai Qing Lemon CMS (CNVD-2021-51355)

Aizumi CMS is a php music website developed with php MySQL. Aizumi CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Arbitrary File Deletion Vulnerability in Man City CMS

Man City CMS program is a complete and powerful rapid site building system developed with the core of CI framework and running in PHP MYSQL environment. ManCity CMS has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete files arbitrarily...

File Upload Vulnerability in Oracle Website Marketing System

Oxbridge Website Marketing System is an open source content management system, the product is based on PHP+MYSQL architecture, and can run on Windows, Linux, MacOSX, Solaris and other various platforms. Oxbones Website Marketing System has a file upload vulnerability that can be exploited by an...

Command Execution Vulnerability in Oracle's Website Marketing System

Oxbridge Website Marketing System is an open source content management system, the product is based on PHP+MYSQL architecture, and can run on Windows, Linux, MacOSX, Solaris and other various platforms. Oxbones Website Marketing System has a command execution vulnerability that can be exploited b...

MyuCMS suffers from an arbitrary file read vulnerability (CNVD-2021-49567)

MyuCMS front-end is built with UIkit framework, back-end is built with layui back-end framework and back-end is developed with PHP+MYSQL. MyuCMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Ai Qing Lemon CMS (CNVD-2021-50624)

Aizumi CMS is a php music website developed with php MySQL. Aizumi CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

BlueCMS suffers from a command execution vulnerability (CNVD-2021-48545)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-48548)

BlueCMS is a portal system applied to local classified information, the development language architecture is php mysql architecture. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...