Command Execution Vulnerability in Guojiz International Website Navigation System

Guojiz International Website Navigation System is a navigation system based on thinkphp. A command execution vulnerability exists in Guojiz International Website Navigation System, which can be exploited by an attacker to gain server control privileges...

Zhenjiang Yunyou Network Technology Co., Ltd. Yunyou CMS has file upload vulnerability

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang City, Yun You Network Technology Co., Ltd. Yun You CMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...

Code Execution Vulnerability in MetInfo of Changsha Mito Information Technology Co.

MetInfo is an open source free CMS building system suitable for enterprise building. Changsha Mito Information Technology Co., Ltd MetInfo has a code execution vulnerability that can be exploited by attackers to obtain server control privileges...

Palm Haidian App has file upload vulnerability

Palm Haidian APP is an official local news and information reading platform. There is a file upload vulnerability in Palm Haidian APP, which can be exploited by an attacker to gain control of the web server...

File upload vulnerability in uublog

uublog is a lightweight website builder. A file upload vulnerability exists in uublog, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in AC15 Upgrade Software of Shenzhen Jixiang Tengda Technology Co.(CNVD-2020-40767)

The AC15 upgrade software is manufactured by Shenzhen Jixiang Tengda Technology Co., Ltd. and features a built-in dual-core processor with DDR3 memory. The Shenzhen Jixiang Tengda Technology Co., Ltd AC15 Upgrade Software suffers from a command execution vulnerability that can be exploited by...

File Upload Vulnerability in Free Version of Hefei Qile Network Technology Co.

KILO Intermediary Free Edition is a TP5.1 based intermediary secured trading system. Hefei Qile Network Technology Co., Ltd Qile Intermediary Guarantee System Free Edition has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in AC15 Upgrade Software of Shenzhen Jixiang Tengda Technology Co.

The AC15 upgrade software is manufactured by Shenzhen Jixiang Tengda Technology Co., Ltd. and features a built-in dual-core processor with DDR3 memory. The Shenzhen Jixiang Tengda Technology Co., Ltd AC15 Upgrade Software suffers from a command execution vulnerability that can be exploited by...

PHPOK suffers from a file upload vulnerability (CNVD-2020-38450)

PHPOK is a content management system for website construction developed by Shenzhen 锟铻科技有限公司 formerly known as PHPOK Studio, written in PHP, default MySQL database storage, based on the LGPL open source agreement license released to the online sharing use. PHPOK file upload vulnerability exists...

freerdp: Integer overflow in region.c

A flaw was found in FreeRDP in versions between 1.0 and 2.0.0. An integer overflow was found in the region.c function which could allow an attacker the ability to control the RDP server as well as the data sent to the client. The highest threat from this vulnerability is to data confidentiality a...

JAVA Deserialization Remote Command Execution Vulnerability in UFIDA NC

UFIDA NC products are world-class high-end management software for group enterprises, with a market share that has reached the first in Asia Pacific among similar products, and have been applied in 8,000 group enterprises, with domestic users covering most critical infrastructure operating units....

Command Execution Vulnerability in Ocean CMS Backend (CNVD-2020-33133)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A command execution vulnerability exists in the backend of Ocean CMS, which can be exploited by attackers to gain control of the web server...

File upload vulnerability in weiphp backend

WeiPHP is a convenient and scalable open source WeChat public platform development framework, using it you can easily build a own WeChat public platform. weiphp backend file upload vulnerability, attackers can use the vulnerability to upload malicious files, get server privileges...

Command Execution Vulnerability in XYHCMS of Kunming Yuntao Technology Co.

XYHCMS is a completely open source CMS content management system. A command execution vulnerability exists in XYHCMS by Kunming Yuntao Technology Co. An attacker can exploit the vulnerability to gain control of the server...

Command execution vulnerability exists in imcat (CNVD-2020-31503)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A command execution vulnerability exists in imcat. An attacker can exploit the vulnerability to gain control of the server...

Command execution vulnerability in SeaCMS backend ad***_pi***.php page

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. A command execution vulnerability exists in the adpi.php page in the background of SeaCMS. An attacker can exploit the vulnerability to gain control of the server...

File inclusion vulnerability in 115CMS backend In***.php file

115CMS is a content management system developed on ThinkPHP framework. A file inclusion vulnerability exists in the 115CMS backend In.php file. An attacker can exploit this vulnerability to upload arbitrary files and gain control of the web server...

File Containment Vulnerability in Cloud EC B2C Self-Hosted Version

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC B2C Self-supporting version of the existence of file containment vulnerability, attackers can use the...

EyouCms suffers from file upload vulnerability (CNVD-2020-28083)

EyouCms is a free and open source enterprise content management system based on the TP5.0 framework as the core development. EyouCms has a file upload vulnerability that can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Liangjing Mall Online Shop Shopping System (CNVD-2020-28134)

Liangjing online store mall system is to small and medium-sized enterprises and individuals to quickly build a personalized online store, online store system. There is a file upload vulnerability in LiangJing Mall online store shopping system, which can be exploited by attackers to upload malicio...