Code Execution Vulnerability in DouPHP

DouPHP is a lightweight enterprise website management system, based on PHP+Mysql architecture, can run on Linux, Windows, MacOSX, Solaris and other platforms. DouPHP has a code execution vulnerability that can be exploited by attackers to gain control of the server...

Unauthorized Access Vulnerability in txjcms v4.0

Skywalker Networks is an Internet integrated service platform provider. An unauthorized access vulnerability exists in txjcms v4.0. An attacker can exploit this vulnerability to gain control of the web server...

SQL Injection Vulnerability in Website Building System of Beijing Dingwei Zhichuang Technology Co.

Beijing Dingwei Zhichuang Technology Co., Ltd. is committed to website construction/revision, cell phone website, micro letter website, domain name space and other work. There is a SQL injection vulnerability in the website construction system of Beijing Dingwei Zhichuang Technology Co., Ltd. tha...

Multiple JAVA Deserialization Vulnerabilities in UFIDA NC System

UFIDA NC system is a world-class high-end management software for group enterprises. There are multiple JAVA deserialization vulnerabilities in UFIDA NC system, which can be exploited by attackers to remotely execute operating system commands and obtain server control privileges...

Unrestricted file upload

A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index/group/upload.html to gain server control by...

CVE-2018-14911

A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index/group/upload.html to gain server control by...

CVE-2018-14911

UKCMS ≤1.1.7 file upload flaw enables an attacker with admin access to bypass PHP upload restrictions by adding php,php to the upload_file_ext setting and uploading a malicious script via the admin.php/admin/configset/index/group/upload.html page. The root cause is inadequate filtering of the upl...

CVE-2018-14911: Unrestricted Upload of File with Dangerous Type

A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index/group/upload.html to gain server control by...

PT-2018-12795

Name of the Vulnerable Software and Affected Versions ukcms versions 1.1.7 and earlier Description A file upload issue exists due to insufficient filtering of the file upload type. An attacker can exploit this by uploading a script Trojan to the admin.php/admin/configset/index/group/upload.html...

File Upload Vulnerability in Laoban CMS v2.0

Laoban CMS content management system referred to as: Laoban CMS is developed by Laoban based on PHP + MYSQL environment of the open source station-building system. File upload vulnerability exists in Laoban CMS v2.0. The vulnerability is due to the system does not strictly filter the file upload...

File upload vulnerability in UKcms v1.1.7 and previous versions

UKcms is a simple, flexible and open source web content management system based on PHP7 and mysql technology. UKcms v1.1.7 and previous versions exist file upload vulnerability. The vulnerability is due to the system does not strictly filter the file upload type. Attackers can use the vulnerabili...

Code Execution Vulnerability in YUNUCMS v1.1.1

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. Code execution vulnerability exists in YUNUCMS v1.1.1. An attacker can exploit the vulnerability to execute arbitrary code and gain...

Lokomedia CMS Arbitrary File Upload Vulnerability

Lokomedia CMS is a php based content management system. Lokomedia CMS suffers from an arbitrary file upload vulnerability that can be exploited by an attacker to upload arbitrary files and gain control of the server...

Code execution vulnerability in weiphp 2.0 system backend

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. A code execution vulnerability exists in the weiphp 2.0 backend, which can be exploited by attackers to execute code and thus gain control of the server...

Code execution vulnerability in weiphp 2.0 frontend

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. A code execution vulnerability exists in the weiphp 2.0 frontend platform, which can be exploited by attackers to execute code and thus gain control of the server...

MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass Vulnerabilities

Exploit for php platform in category web applications Vendor: Appnitro Product webpage: https://www.machform.com/ Full-Disclose: https://metalamin.github.io/MachForm-not-0-day-EN/ Fix: https://www.machform.com/blog-machform-423-security-release/ Author: Amine Taouirsa Twitter: @metalamin Google...

Remote code execution

DISPUTED An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using "anonymous" access that is automatically created. Once logged in, a misconfiguration present by default auto-deployment...

ucms v1.4.5 Arbitrary File Editing Vulnerability

UCMS is a simple open source content management system. ucms v1.4.5 version of the existence of arbitrary file editing vulnerability, the attacker can edit any script file, directly write a sentence Trojan horse, to obtain control of the web server...

CVE-2018-9934

The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control...

A Good Shell Is Hard to Choose

I had the recent opportunity to speak at BSides SLC, held on the Sandy campus of Salt Lake Community College. I tailored my presentation to the student demographic and chose to talk about one of the fundamental concepts that a penetration tester must understand: types of shells. I touched on the...