File Upload Vulnerability in FH Admin CMS of Shandong Aife Information Technology Co.

FH Admin is currently the mainstream java rapid development platform. Ltd. FH Admin CMS file upload vulnerability, an attacker can use the vulnerability to obtain control of the web server...

Command Execution Vulnerability in xyhCMS of Kunming Yuntao Technology Co. Ltd (CNVD-2020-53339)

XYHCMS is a completely open source CMS content management system. A command execution vulnerability exists in XYHCMS by Kunming Yuntao Technology Co. An attacker can exploit the vulnerability to gain control of the server...

CVE-2020-24220

ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server...

CVE-2020-24220

ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server...

Command injection

ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server...

CVE-2020-24220

ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server...

PT-2020-15665

Name of the Vulnerable Software and Affected Versions ShopXO version 1.8.1 Description The issue allows attackers to execute arbitrary commands, potentially leading to server control. Recommendations For ShopXO version 1.8.1, update to a newer version that contains a fix for this issue. At the...

CVE-2020-8716

Improper access control for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access...

Multiple Vulnerabilities in JAVAPMS Portal Management System of Nanchang Zhengneng Information Technology Co.

JAVAPMS portal management system to SpringMVC + Spring + Hibernate + Freemarker + Html5 + jQuery for the technical core architecture , for individual webmasters , commercial enterprises , government agencies , educational institutions and other various units of the organization's information port...

File upload vulnerability in zblogphp 1.5.1

Z-Blog is an open source program based on Asp and PHP platforms. Z-Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

Code Execution Vulnerability in KiteCMS Backend

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development , applicable to individuals and enterprises to quickly build stations and development needs. Provide website templates for various industries , the system uses a...

File Upload Vulnerability in MetInfo 7.1.0 Backend of Changsha Mito Information Technology Co.

MetInfo is an open source free CMS building system suitable for enterprise building. Changsha Mito Information Technology Co., Ltd MetInfo 7.1.0 file upload vulnerability exists in the background, attackers can exploit the vulnerability to upload malicious compressed packages and then decompress...

Shenzhen Police Wing Intelligent Technology Co., Ltd. law enforcement recorder electronic evidence management software file upload vulnerability

Shenzhen Police Wings Intelligent Technology Co., Ltd. is a leading enterprise in China's law enforcement recorder industry, focusing on providing law enforcement departments with law enforcement recorders as the core, including the Police Wings series of intelligent law enforcement equipment, th...

Command Execution Vulnerability in SSL VPN of Deepcom Technology Corporation (CNVD-2020-48679)

SSL VPN is a kind of VPN technology provided by SZSS to solve the problem of remote users accessing sensitive company data to realize remote access. A command execution vulnerability exists in the SSL VPN of DeepSync, which can be exploited by an attacker to execute arbitrary commands to gain...

Command Execution Vulnerability in Deepsix VPN Upgrade Maintenance Tool

SSL VPN is a kind of VPN technology provided by SZSS to solve the problem of remote users accessing sensitive company data to realize remote access. A command execution vulnerability exists in the Deepsix VPN Upgrade and Maintenance Tool, which can be exploited by an attacker to remotely upload a...

Command Execution Vulnerability in ZZCMS

ZZCMS is an asp language development of the site building system. ZZCMS has a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands to obtain server control privileges...

Command Execution Vulnerability in Intelligent Operation Management System ITSM of Zhuhai Guojin Software Technology Co.

Zhuhai Guojin Software Technology Co., Ltd. was founded in 2009, specializing in ESM, of which ITSM is an important part. A command execution vulnerability exists in the Intelligent Operation Management System ITSM of Zhuhai Guojin Software Technology Co., Ltd. that can be exploited by an attacke...

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Company Limited (CNVD-2020-49415)

DedeCMS is an open source content management system. Shanghai Zhuozhuo Network Technology Co., Ltd DedeCMS has a code execution vulnerability that can be exploited by attackers to gain server control privileges...

Code Execution Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Company Limited (CNVD-2020-49285)

DedeCMS is an open source content management system. Shanghai Zhuozhuo Network Technology Co., Ltd DedeCMS has a code execution vulnerability that can be exploited by attackers to gain server control privileges...

Beijing Wanwei Yingchuang Technology Development Co., Ltd. Pollution Source Online Monitoring System with File Upload Vulnerability

Beijing Wanwei Yingchuang Technology Development Co., Ltd. was founded in 2004, the company to "Internet + environmental protection" as the main line. A file upload vulnerability exists in the online pollution source monitoring system of Beijing Wanwei Yingchuang Technology Development Co., Ltd...