Lucene search
K

207 matches found

NVD
NVD
added 2022/04/06 9:15 p.m.8 views

CVE-2022-26613

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

9.8CVSS0.00303EPSS
Exploits1References3
Prion
Prion
added 2022/04/06 9:15 p.m.14 views

Sql injection

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

7.5CVSS9.7AI score0.00303EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/04/06 8:55 p.m.11 views

CVE-2022-26613

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php...

10AI score0.00303EPSS
Exploits1References3
CVE
CVE
added 2022/04/06 8:55 p.m.74 views

CVE-2022-26613

CVE-2022-26613 affects PHP-CMS v1.0, with a SQL injection vulnerability in the category parameter of categorymenu.php. The connected documents consistently describe a PHP/MySQL-based PHPCMS v1.0 vulnerability due to unsanitized input in the category parameter, enabling SQL injection. The NVD entr...

9.8CVSS9.7AI score0.00303EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2022/04/06 12:0 a.m.2 views

PHPCMS SQL注入漏洞

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules for news, images, downloads, information, products, etc. A security vulnerability exists in PHPCMS v1.0, which stems from the category parameter in categorymenu.php. No detailed vulnerabilit...

9.8CVSS5.6AI score0.00303EPSS
Exploits1References4
NVD
NVD
added 2021/11/03 6:15 p.m.11 views

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

7.5CVSS0.00246EPSS
Exploits1References1
Prion
Prion
added 2021/11/03 6:15 p.m.7 views

Sql injection

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

5CVSS7.6AI score0.00246EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/11/03 5:57 p.m.11 views

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

7.6AI score0.00246EPSS
Exploits1References1
CVE
CVE
added 2021/11/03 5:57 p.m.32 views

CVE-2020-18263

CVE-2020-18263 affects PHP-CMS v1.0, with a SQL injection in the search.php component via the search parameter. This allows attackers to access sensitive database information. Root cause: input from the search parameter is not properly sanitized/validated. Impact is exposure of data; no exploitat...

7.5CVSS7.6AI score0.00246EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2021/10/09 12:0 a.m.13 views

Maccms Cross-Site Scripting Vulnerability (CNVD-2021-88954)

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Macmms 10, which stems from a failure to properly handle data for the typeen parameter in the product. An attacker could obtain an administrator cookie and escalate privileg...

6.1CVSS2.9AI score0.00223EPSS
Exploits1References1
OSV
OSV
added 2021/06/16 6:15 p.m.1 views

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

9.8CVSS5.8AI score0.00286EPSS
Exploits1References1
CNVD
CNVD
added 2021/05/17 12:0 a.m.4 views

YCCMS suffers from a file upload vulnerability (CNVD-2021-37964)

YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...

7.5AI score
Exploits0
CNVD
CNVD
added 2021/05/17 12:0 a.m.4 views

Arbitrary file deletion vulnerability in YCCMS (CNVD-2021-37965)

YCCMS is a PHP version of a lightweight CMS builder. YCCMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

7.2AI score
Exploits0
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.2 views

yccms project 路径遍历漏洞

YCCMS is a Php-based lightweight CMS builder from the Yccms team. YCCMS 3.3 has a path traversal vulnerability, which stems from an error in the judgment of request parameters by the delete, deletesite, and deleteAll functions. No detailed vulnerability details are available...

7.5CVSS7.1AI score0.00456EPSS
Exploits1References2
CNVD
CNVD
added 2020/11/30 12:0 a.m.3 views

CatfishCMS has a file upload vulnerability

Catfish CMS is a free and open source PHP content management system. A file upload vulnerability exists in CatfishCMS, which can be exploited by an attacker to gain control of the server...

7.5AI score
Exploits0
CNVD
CNVD
added 2020/06/17 12:0 a.m.1 views

SQL Injection Vulnerability in PHPCMS of Coolmouse (Beijing) Culture Media Co.

PHPCMS is a self-developed framework using the OOP object-oriented approach. There is a SQL injection vulnerability in PHPCMS of CoolSkate Beijing Culture Media Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/06/14 12:0 a.m.1 views

Extreme CMS suffers from SQL injection vulnerability (CNVD-2020-44107)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/06/12 12:0 a.m.1 views

PHPCMS version 9.1.5 to 9.6.3 SQL injection vulnerability in content module si***.php page

PHPCMS uses PHP5+MYSQL as the technical basis for development.V9 uses OOP object-oriented approach to build the basic operational framework. PHPCMS 9.1.5 to 9.6.3 versions of the content module si.php page there is a SQL injection vulnerability, attackers can use the vulnerability to obtain...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/04/08 12:0 a.m.1 views

Langfang Extreme Networks Technology Co. Extreme CMS has file upload vulnerability

Extreme CMS is an open source PHPCMS web content management system. Ltd. Extreme CMS has a file upload vulnerability that can be exploited by attackers to upload malicious files to gain server privileges...

7.3AI score
Exploits0
CNVD
CNVD
added 2019/06/19 12:0 a.m.1 views

File upload vulnerability in the ap***_co***.php file in the background of PHPOK enterprise website building system (CNVD-2019-21282)

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in the apco.php file in the background of the PHPOK enterprise website system. Remote attackers can use this vulnerability to obtain server administrative privileges...

7.1AI score
Exploits0
Rows per page
Query Builder