402 matches found
CVE-2020-22200
Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to publicgetsuggestkeyword...
CVE-2020-22199
SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the diggmod parameter to diggadd.php...
Design/Logic Flaw
phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php...
Sql injection
SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the diggmod parameter to diggadd.php...
Directory traversal
Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to publicgetsuggestkeyword...
CVE-2020-22203
SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...
CVE-2020-22203
CVE-2020-22203 describes an SQL injection in phpCMS 2008 sp4 via the genre parameter in yp/job.php. The root cause is insecure input handling in that script, enabling attackers to manipulate SQL statements. Impact per the records is high; CVSS v3.1 base score 9.8 (CRITICAL) with network attack, n...
CVE-2020-22201
In the provided documents, the affected software is phpcMS 2008 sp4. The vulnerability arises in the yp/product.php endpoint, where the pagesize parameter can be exploited by remote malicious users to execute arbitrary PHP commands (command injection). The root cause is improper handling of the p...
CVE-2020-22201
phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php...
CVE-2020-22200
The CVE-2020-22200 entry concerns phpcms 9.1.13 with a directory traversal flaw exploitable via the q parameter to public_get_suggest_keyword. Affected component: phpcms web CMS (PHP/MySQL stack). Root cause: improper handling of user-supplied q parameter allowing path traversal. Impact stated as...
CVE-2020-22200
Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to publicgetsuggestkeyword...
CVE-2020-22199
CVE-2020-22199 is a SQL injection vulnerability in phpCMS 2007 SP6 build 0805, exploitable via the digg_mod parameter to digg_add.php. Affected component is phpCMS’s PHP/MySQL-based web CMS; root cause is insecure handling of the digg_mod parameter leading to SQL statements being injected. CVSS m...
CVE-2020-22199
SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the diggmod parameter to diggadd.php...
PHPCMS SQL注入漏洞
PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, images, downloads, information, products and so on. A SQL injection vulnerability exists in phpCMS because the genre parameter in the yp/job.php file is not handled securely,...
PHPCMS 路径遍历漏洞
phpcms is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information, products and so on. A path traversal vulnerability exists in phpcms version 9.1.13. An attacker can exploit this vulnerability to perform...
PT-2021-10744
Name of the Vulnerable Software and Affected Versions phpCMS version 9.1.13 Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the q parameter to the "public get suggest keyword" endpoint. Recommendations For phpCMS version 9.1.13, consider restrictin...
PT-2021-10743
Name of the Vulnerable Software and Affected Versions phpCMS 2007 SP6 build 0805 Description The issue is related to a SQL Injection vulnerability. It can be exploited via the digg mod parameter to the "digg add.php" endpoint. Recommendations For phpCMS 2007 SP6 build 0805, consider restricting...
PT-2021-10746
Name of the Vulnerable Software and Affected Versions phpCMS 2008 sp4 Description The issue is related to SQL Injection in phpCMS via the genre parameter to "yp/job.php" API endpoint. Recommendations For phpCMS 2008 sp4, as a temporary workaround, consider restricting access to the "yp/job.php" A...
CVE-2020-22200: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to publicgetsuggestkeyword...