EUVD-2018-3053

Malware in sbrugna...

CVE-2018-19748

app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug=admin=index=attachment= directory traversal. The value of the root parameter must be base64 encoded note that base64 encoding, instead of URL encoding, is very rare in a directory travers...

Parallel Override Vulnerability in SDCMS v1.6

SDCMS era website information management system is a product of Suzhou Fireworks Network Technology Co., Ltd. to asp + access for the development of the portal system. SDCMS v1.6 has a parallel override vulnerability. Attackers can use the vulnerability to illegally modify the user release...

Code Execution Vulnerability in SDCMS Version 1.1

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. There is a code execution vulnerability in SDCMS V1.1, which can be exploited by attackers to execute code and gain administrative privileges...