PHPCMS 2008 - Remote Code Execution via Template Injection

PHPCMS 2008 suffers from an unauthenticated RCE via template injection in type.php, where attacker-supplied content is written into a PHP template cache file, which is then executable. id: CVE-2018-19127 info: name: PHPCMS 2008 - Remote Code Execution via Template Injection author: tomaquet18...

EUVD-2011-0663

Malware in sbrugna...

EUVD-2011-0662

Malware in sbrugna...

EUVD-2020-14968

Malware in sbrugna...

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

Sql injection

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

Design/Logic Flaw

phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php...

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

CVE-2020-22201

phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php...

CVE-2020-22201

In the provided documents, the affected software is phpcMS 2008 sp4. The vulnerability arises in the yp/product.php endpoint, where the pagesize parameter can be exploited by remote malicious users to execute arbitrary PHP commands (command injection). The root cause is improper handling of the p...

PHPCMS 2008 type.php Code Injection (CVE-2018-19127)

A code injection vulnerability exists in PHPCMS 2008. An attacker could write arbitrary content to a website cache file with a controllable filename. Successful exploitation of this vulnerability could lead to arbitrary code execution...

CVE-2018-19127

A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cachetemplate/.tpl.php file...

Code injection

A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cachetemplate/.tpl.php file...

CVE-2018-19127

PHPCMS 2008 is affected by CVE-2018-19127 due to an unauthenticated remote code execution via template injection in /type.php. Attacker-supplied content is written to a PHP template cache file under data/cache_template/*.tpl.php, appended with a "

PHPCMS 2008 /preview.php SQL注入漏洞

No description provided by source...

PHPCMS 2008 c.php SQL注入漏洞

No description provided by source...

PHPCMS 2008 /yp/web/include/common.inc.php 命令执行漏洞

No description provided by source...

phpcms 2008 yp/product.php 代码执行漏洞

No description provided by source...

PHPCMS 2008 /include/admin/model_field.class.php sql注入漏洞

No description provided by source...