EUVD-2018-8129

Malware in sbrugna...

CVE-2018-16278

phpkaiyuancms PhpOpenSourceCMS POSCMS V3.2.0 allows an unauthenticated user to execute arbitrary SQL commands via the diy/module/member/controllers/Api.php ajaxsavedraft function with the dir parameter...

CVE-2018-16278: Improper Neutralization of Special Elements used in an SQL Command

phpkaiyuancms PhpOpenSourceCMS POSCMS V3.2.0 allows an unauthenticated user to execute arbitrary SQL commands via the diy/module/member/controllers/Api.php ajaxsavedraft function with the dir parameter...

PT-2018-13459

Name of the Vulnerable Software and Affected Versions phpkaiyuancms PhpOpenSourceCMS POSCMS version 3.2.0 Description The issue allows an unauthenticated user to execute arbitrary SQL commands. This is achieved via the "diy/module/member/controllers/Api.php" file, specifically through the ajax sa...

SQL Injection Vulnerability in POSCMS v3.2.0 (Free Edition) Pa***.php Page

POSCMS PhpOpenSourceCMS is a PHP and MySQL based, open source, cross-platform web content management system CMS. A SQL injection vulnerability exists in the Pa.php page of POSCMS v3.2.0 free version. An attacker can exploit the vulnerability to obtain sensitive information from the database...