Hurricane CMS has an arbitrary file read vulnerability

Hurricane CMS is a content management system developed using PHP mysql. Hurricane CMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

74cms 6.0.20 suffers from a logic flaw vulnerability (CNVD-2021-25005)

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. A logic flaw vulnerability exists in 74cms 6.0.20, which can be exploited by attackers to compromise the integrity of the system...

Songcms suffers from SQL injection vulnerability (CNVD-2021-25000)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . Songcms SQL injection vulnerability , attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in Health Collection Reporting System (CNVD-2021-24511)

Health collection and reporting system using PHP + mysql development, open source code, to facilitate secondary development. Health collection and reporting system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Code execution vulnerability in geeweb

geeweb is a PHP MySQL-based development to completely free, fast site, easy maintenance, high security, strong load force, SEO friendly and other features, for the small and medium-sized enterprises, social groups, schools and individual users, such as the station-building system. A code executio...

SQL injection vulnerability exists in the open-source version of the UX365 web site navigation (CNVD-2021-24438)

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...

SQL injection vulnerability in the open source version of UX365 website navigation

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...

SeaCMS suffers from SQL injection vulnerability (CNVD-2021-17447)

SeaCMS is a web content management system based on PHP MYSQL architecture and can run across platforms. SeaCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Online Ordering System 1.0 Shell Upload

Exploit Title: Online Ordering System 1.0 - Arbitrary File Upload to Remote Code Execution Date: 04/03/2021 Exploit Author: Suraj Bhosale Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/5125/online-ordering-system-using-phpmysql.html Version: 1.0...

SeaCMS suffers from an XSS vulnerability (CNVD-2021-17448)

SeaCMS is a web content management system based on PHP MYSQL architecture and can run across platforms. SeaCMS has an XSS vulnerability. An attacker can exploit this vulnerability to obtain sensitive information such as user cookies...

OurPHP Backend Data Backup Function Has Arbitrary File Deletion Vulnerability

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP background data backup function exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete arbitrary files...

Code Execution Vulnerabilities in Knight CMS Backend of Taiyuan Xunyi Technology Co.

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS code execution vulnerabilities exist in the background. Attackers can exploit the vulnerability to obtain control of the server...

Advisto PEEL SHOPPING Cross-Site Scripting Vulnerability

Advisto PEEL SHOPPING is an open source e-commerce system based on PHP and MySQL. A cross-site scripting vulnerability exists in Advisto PEEL SHOPPING, which arises from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

PhpOK SQL Injection Vulnerability

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. PhpOK 5.4.137 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability by injecting attachment data via SQL and then calling the attachment...

Arbitrary Code Execution Vulnerability in Ocean Cms Backend

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. There is an arbitrary code execution vulnerability in the backend of SeaCMS, which can be exploited by attackers to gain control of the server...

Unauthorized access vulnerability in songcms front-end

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. An unauthorized access vulnerability exists in the front-end page of SongCMS. An attacke...

Command Execution Vulnerability in songcms Backend

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...

Information leakage vulnerability in YzmCMS

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS information leakage vulnerability , attackers can use the vulnerability to obtain sensitive user information...

Arbitrary File Deletion Vulnerability in WMCMS (CNVD-2021-13595)

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file deletion vulnerability , an attacker can exploit the vulnerability to delete any file under the server...

Command Execution Vulnerability in Knight CMS of Taiyuan Xunyi Technology Co.

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS has a command execution vulnerability that can be exploited by attackers to gain server control privileges...