SQL Injection Vulnerability in SDCMS 4-in-1 Enterprise Website Management System (CNVD-2020-33106)

Four-in-one enterprise website management system is a computer website + mobile website + WeChat public number + small program in one of the content management system. There is a SQL injection vulnerability in SDCMS, which can be exploited by attackers to obtain sensitive information from the...

SDcms Cross-Site Request Forgery Vulnerability

SDcms is a PHP and MySQL based enterprise building content management system CMS by China Smoke & Fire Network Technology. A cross-site request forgery vulnerability exists in the /WWW//app/admin/controller/admincontroller.php file in SDcms version 1.5. A remote attacker can exploit this...