Command Execution Vulnerability in Espcms P8 Backend of Honghu Erchuang Netlink Information Technology Co.

ESPCMS-P8 enterprise station management system using PHP + MySQL development, after 6 generations of development, the current ESPCMS-P8 platform stability and can be developed independently of the maturity of the platform, which supports enterprise news and product releases, talent recruitment,...

WTCMS suffers from a file upload vulnerability (CNVD-2020-47243)

WTCMS is a content management system CMS based on Thinkphp. WTCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

Li Lei's blog suffers from a file upload vulnerability (CNVD-2020-47302)

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in WeiPHP mo***.php File at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP mo.php file has a command execution vulnerability that can be exploited by an attacker to gain control of t...

File Upload Vulnerability in TpFlow Workflow Engine

TpFlow workflow engine is a PHP-based development of the workflow engine . A file upload vulnerability exists in TpFlow Workflow Engine, which can be exploited by an attacker to gain control of a web server...

Li Lei's blog has a file upload vulnerability

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File inclusion vulnerability in WeiPHP pl***.cl***.php file at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP pl.cl.php file file contains a file inclusion vulnerability that can be exploited by an attacker to gain...

File Upload Vulnerability in Multiple Systems of Anhui KU Aorui Technology Co.

Ltd. is a company dedicated to the development of teaching and management software for universities and colleges, the development of experimental instruments, and the provision of management overall design and solutions for teaching and research institutions. A file upload vulnerability exists in...

File Upload Vulnerability in Bole Card Issuing System of Zunyi Xintengda Information Technology Co.

Zunyi Xintengda Information Technology Co., Ltd. is a professional e-commerce operation and network marketing services company. A file upload vulnerability exists in Zunyi Xintengda Information Technology Co., Ltd.'s Bole hairpin system, which can be exploited by an attacker to gain control of a...

TuziCMS v3.0 do***_fe*** has command execution vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 dofe has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

TuziCMS v3.0 do***_mb*** has command execution vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 domb has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Multiple vulnerabilities in Zenphoto

Overview Zenphoto is a content management system CMS. Zenphoto contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2020-5592 Code Injection CWE-94 - CVE-2020-5593 Tomohisa Maeda of Panasonic Corporation, Product Security Center reported this vulnerability to IPA...

File upload vulnerability exists in uublog (CNVD-2020-33969)

uublog is a lightweight PHP blog system source code developed in PHP + MySQL. uublog has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

The Bondnet Army

Guardicore Labs has recently picked up Bondnet, a botnet of thousands of compromised servers of varying power. Managed and controlled remotely, the Bondnet is currently used to mine different cryptocurrencies and is ready to be weaponized immediately for other purposes such as mounting DDoS attac...

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

File Upload Vulnerability in Aiwo Real Estate System

Love nest real estate system is based on the second development of the intimate cat v4.7, specifically for the real estate industry customized set of systems. There is a file upload vulnerability in AiWo Real Estate System, which can be exploited by attackers to gain control of the web server...

MCMS suffers from a file upload vulnerability (CNVD-2020-38496)

MCMS is a website building system of MINGFEI TECHNOLOGY CO. MCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of a web server...

Command execution vulnerability exists in imcat (CNVD-2020-31504)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A command execution vulnerability exists in imcat. An attacker can exploit the vulnerability to gain control of the server...

File upload vulnerability in imcat

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A file upload vulnerability exists in imcat. An attacker can exploit this vulnerability to upload malicious files and gain administrative privileges on the server...

File upload vulnerability exists in BeyongCms (CNVD-2020-31490)

BeyongCms is a content management system based on ThinkPHP 5.1 framework. A file upload vulnerability exists in BeyongCms. An attacker can exploit this vulnerability to upload malicious files and gain administrative privileges on the server...