File Upload Vulnerability in deituiCMS

deituiCMS is a PHP-based open source content management system. deituiCMS has an arbitrary file upload vulnerability that can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Z-BlogPHP 1.5.2 Zero Backend

Z-BlogPHP is an open source PHP-based blog system developed by Z-Blog. Z-BlogPHP1.5.2Zero back-end theme management and plug-in management of the existence of file upload vulnerability, attackers can use the vulnerability to obtain control of the web server...

Remot3d v2.0 - Tool Created For Large Pentesters As Well As Just For The Pleasure Of Defacers To Control Server By Backdoors

Remot3d - A tool made to generate backdoor to control and exploit a server where the server runs the PHP Hypertext Preprocessor program. Equipped with a backdoor that has been Obfuscated which means that 100% FUD FULLY UNDETECTABLE in other words can penetrate the firewall of a server because of...

MetInfo Code Execution Vulnerability (CNVD-2019-06798)

MetInfo using PHP + Mysql architecture, is a corporate website construction cms website building system. MetInfo has a code execution vulnerability that can be exploited by constructing a payload to obtain the value of metmemberforce in the MetInfo configuration. MetInfo has a code execution...

Page code execution vulnerability in MLECMS backend s***_uc***r.php

MLECMS is a multilingual, free and open source content management system. A page code execution vulnerability exists in the MLECMS backend sucr.php. An attacker can exploit the vulnerability to write a webshell to a user-accessible php page to gain server control privileges...

File Upload Vulnerability in DedeCMS V5.7

DedeCMS Dream Weaving Content Management System is China's Zhuozhuo Network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. DedeCMS V5.7 file upload vulnerability, a...

File Upload Vulnerability in Super CMS Backend

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

Command Execution Vulnerability in Zendo Project Management Software

Zendo Project Management Software is homegrown open source project management software. Zendo Project Management Software has a command execution vulnerability that can be exploited by attackers to execute arbitrary commands and gain control of a web server...

Command Execution Vulnerability in JYmusic v2.0.0

JYmusic is an open source cross-platform music management system. JYmusic v2.0.0 suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the web server...

Arbitrary Code Execution Vulnerability in EBCMS

EBCMS Ebay Management System is a website management system based on PHP + MYSQL development, the core of the system is extremely streamlined, all functions are realized through the application extensions. EBCMS has an arbitrary code execution vulnerability, which can be exploited by attackers to...

CatfishCMS has a command execution vulnerability

CatfishCMS is open source and free PHP CMS web content management system. CatfishCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of a web server...

File write vulnerability in MetInfo version 6.1.3 backend

MetInfo is a content management system CMS developed using PHP and Mysql by Changsha Mito Information Technology Co. A file write vulnerability exists in the backend of MetInfo version 6.1.3, which can be exploited by attackers to gain control of the web server...

Code execution vulnerability in WTCMS backend

WTCMS is a content management system CMS based on Thinkphp. A code execution vulnerability exists in the WTCMS backend, which can be exploited by an attacker to gain control of the web server...

WordPress FCKEditor-For-Wordpress-Plugin Remote Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A remote upload vulnerability exists in WordPress FCKEditor-For-Wordpress-Plugin. Allows an attacker to upload a webshell and...

ESPCMS suffers from a code execution vulnerability (CNVD-2018-26936)

ESPCMS is developed by PHP+MySQL and is able to run major mainstream cloud platforms. ESPCMS has a code execution vulnerability that can be exploited by attackers to gain control of the web server...

Command Execution Vulnerability in Multiple php Files in Thunderwind Movie CMS v3.8.6

Thunderwind Movie CMS is a PHP based THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. Thunderwind Movie CMS v3.8.6 multiple php file command execution vulnerability, an attacker can exploit the...

Code Execution Vulnerability in Frontend of zzzcms V1.5.8 Official Version

zzcms is a free and open source building system, mainly facing the majority of webmasters use. zzzcms V1.5.8 official version of the foreground there is a code execution vulnerability, an attacker can use the vulnerability to obtain control of the web server...

Code Execution Vulnerability in FeiFeiCms Frontend

FeiFeiCms is developed with PHP+Mysql technology and can run on windows and Linux system platform. FeiFeiCms code execution vulnerability exists in the front-end, an attacker can exploit the vulnerability to obtain control of the web server...

Command Execution Vulnerability in YFCMF

YFCMF is a backend content management framework using ThinkPHP 5.1. + foreign ACE 1.40 UI template. YFCMF has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

Command Execution Vulnerability in D-link Central WifiManager

D-LINK Central WifiManager CWM-100 is D-LINK centralized wireless management software. A code execution vulnerability exists in the implementation of D-Link Central WiFiManager, which can be exploited by an attacker to gain control of a web server...