CVE-2025-7931

A vulnerability was found in code-projects Church Donation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /members/adminpic.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. T...

tp5cms Arbitrary File Upload Vulnerability

tp5cms is a content management system CMS framework written in the PHP language and based on technologies such as ThinkPHP, swiper and bootstrap. A security vulnerability exists in the admin.php/upload/picture.html page in tp5cms 2017-05-25 and earlier versions. A remote attacker can exploit the...

S-CMS /js/pic.asp page suffers from SQL injection vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the S-CMS /js/pic.asp page. The vulnerability is due to the system failing to effectively filter user-submitted data. An attacker could exploit this vulnerability ...