CVE-2020-22199: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the diggmod parameter to diggadd.php...

PT-2021-10745 · Phpcms · Phpcms

Name of the Vulnerable Software and Affected Versions: phpCMS 2008 sp4 Description: The issue allows remote malicious users to execute arbitrary php commands. This is achieved via the pagesize parameter to the "yp/product.php" endpoint. Recommendations: For phpCMS 2008 sp4, consider restricting...

CVE-2020-22201: Improper Control of Generation of Code

phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php...

Command Execution Vulnerability in FangfaCMS

Method Digital Web Content Management System FangfaCms is a PHPCMS web management system. A command execution vulnerability exists in FangfaCMS, which can be exploited by an attacker to gain server control privileges...

PHPCMS version 9.1.5 to 9.6.3 SQL Injection Vulnerability in Member Module me***_mo***.php

PHPCMS uses PHP5+MYSQL as the technical basis for development.V9 uses OOP object-oriented approach to build the basic operational framework. PHPCMS 9.1.5 to 9.6.3 version of the membership module memo.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitiv...

PHPCMS me***.php page suffers from SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. A SQL injection vulnerability exists in the PHPCMS me.php page, which can be exploited by attackers to obtain sensitive information from the database...

File upload vulnerability in phpcms

PHPCMS uses PHP5+MYSQL as the technical basis for development.V9 uses OOP object-oriented approach to build the basic operational framework. A file upload vulnerability exists in phpcms, which can be exploited by attackers to gain control of the web server...

PHPCMS suffers from a file upload vulnerability (CNVD-2019-30562)

PHPCMS is a web content management system based on PHP and Mysql architecture. A file upload vulnerability exists in PHPCMS, which can be exploited by attackers to gain control of a web server...

PHPCMS has a file upload vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. A file upload vulnerability exists in PHPCMS, which can be exploited by attackers to gain control of a web server...

PHPCMS 2008 type.php Code Injection (CVE-2018-19127)

A code injection vulnerability exists in PHPCMS 2008. An attacker could write arbitrary content to a website cache file with a controllable filename. Successful exploitation of this vulnerability could lead to arbitrary code execution...

CVE-2019-10027

PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox aka E-mail field on the personal information screen...

Code injection

PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox aka E-mail field on the personal information screen...

CVE-2019-10027

PHPCMS 9.6.x–9.6.3 is affected by a cross-site scripting (XSS) vulnerability in the mailbox (E-mail) field on the personal information screen. The root cause is described as XSS, but the provided documents do not specify the exact vulnerable code path, affected components, or versions beyond 9.6....

CVE-2019-10027

PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox aka E-mail field on the personal information screen...

PT-2019-11299

Name of the Vulnerable Software and Affected Versions: PHPCMS versions 9.6.x through 9.6.3 Description: The issue is related to a XSS flaw via the mailbox field on the personal information screen, allowing potential exploitation. Recommendations: For PHPCMS versions 9.6.x through 9.6.3, update to...

CVE-2019-10027: Improper Neutralization of Input During Web Page Generation

PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox aka E-mail field on the personal information screen...

PHPCMS has an xss vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. An xss vulnerability exists in PHPCMS. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

Code Execution Vulnerability in PHPCMS 2008 sp4 System

PHPCMS is a web content management system based on PHP and Mysql architecture. A code execution vulnerability exists in PHPCMS 2008 sp4. An attacker can exploit this vulnerability to execute arbitrary code...

PHPCMS Code Injection Vulnerability

PHPCMS is a website content management system based on PHP and Mysql architecture, which includes modules such as news, pictures, downloads, information and products. A code injection vulnerability exists in PHPCMS 2008, which can be exploited to write arbitrary content to the website cache and...

CVE-2018-19127

A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cachetemplate/.tpl.php file...