D Shield of Shenzhen DiYuan Technology Co., Ltd. suffers from webshell bypass vulnerability (CNVD-2020-23537)

D ShieldFirewall is an active defense protection software designed for IIS. D-Shield has a webshell bypass vulnerability, which can be exploited by attackers to bypass detection and gain access to the control privileges of the target server...

Command Execution Vulnerability in Ocean CMS Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. An arbitrary command execution vulnerability exists in the backend of Ocean CMS. An attacker can exploit this vulnerability to gain control of the web server...

File upload vulnerability in S-CMS enterprise website building system (CNVD-2020-20176)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A file upload vulnerability exists in S-CMS, which can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in eFrameWork

eFrameWork is a development framework for B/S application and web development. A file upload vulnerability exists in eFrameWork, which can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in ClanSphere

ClanSphere is a web content management system primarily used for building tribal and eSports websites. ClanSphere suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in S-CMS Enterprise Website Building System (CNVD-2020-21364)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A file upload vulnerability exists in S-CMS, which can be exploited by an attacker to gain control of the web server...

SQL Injection Vulnerability in seacms Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. A SQL injection vulnerability exists in the seacms backend. An attacker can exploit this vulnerability to gain control of the web server...

File upload vulnerability in phpcms

PHPCMS uses PHP5+MYSQL as the technical basis for development.V9 uses OOP object-oriented approach to build the basic operational framework. A file upload vulnerability exists in phpcms, which can be exploited by attackers to gain control of the web server...

Remote File Inclusion (RFI) – Detecting the Undetectable

Intro Remote File Inclusion RFI is an attack exploiting the functionality in web applications which allows the inclusion of external source code without validating its content or origin. An RFI payload is a link that points to a malicious file that an application will include in its code example:...

Webshell Bypass Vulnerability in D-Shield of Shenzhen DiYuan Technology Co.

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield has a Webshell bypass vulnerability, which can be exploited by attackers to gain access to the control of the target server...

Signature Validation Bypass

Overview electron-updater is a module allowing applications to implement auto-update functionality. Affected versions of this package are vulnerable to Signature Validation Bypass. The signature verification check is based on a string comparison between the installed binary’s publisherName and th...

Command execution vulnerability in multiple D-Link routers (CNVD-2020-15533)

The D-Link DIR-878, DIR-882, and DIR-867 are all router products from AUO D-Link. A command execution vulnerability exists in multiple D-Link routers, which can be exploited by an attacker to gain control of a web server...

Xiamen Service Cloud Information Technology Co., Ltd. security dog suffers from webshell bypass vulnerability

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. Xiamen Service Cloud Information Technology Co., Ltd. security dog there is a webshell bypass vulnerability, attackers can use the vulnerability to obtain the target...

Concrete CMS: Remote Code Execution (Reverse Shell) - File Manager

Remote Code Execution Reverse Shell - File Manager • Title: concrete5-8.5.2 Remote Code Execution - Reverse Shell • Keyword: crayons • Software : concrete5 • Product Version: 8.5.2 • Vulnerability : Remote Code Execution - Reverse Shell • Vulnerable component: File Manager The attacker needs the...

File upload vulnerability exists in super cms (CNVD-2020-13574)

Super cms content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

File Upload Vulnerability in Laike E-commerce System (CNVD-2020-13871)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laike E-commerce system, which can be exploited by attackers to gain control of the web server...

Command Execution Vulnerability in XYHCMS Backend Sy***.cl***.php File

XYHCMS Xingyunhai CMS is a completely open source CMS content management system. A command execution vulnerability exists in the XYHCMS backend Sy.cl.php file. Attackers can use the vulnerability to obtain control of the server...

File Upload Vulnerability in hybbs v2.3.2

HYBBS is a PHP website program that supports plugin extensions and template extensions. A file upload vulnerability exists in hybbs v2.3.2, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Netnew Enterprise Website Management System

Netnew enterprise website management system is an ASP + ACCESS environment based on the development of website management system. A file upload vulnerability exists in Netnew Enterprise Website Management System, which can be exploited by an attacker to gain control of the web server...

Command Execution Vulnerability in OECMS

OECMS enterprise website system is a set of enterprise building system based on the development of OEPHP architecture system development. OECMS has a command execution vulnerability that can be exploited by attackers to gain control of the web server...