1373 matches found
Command Execution Vulnerability in zzzcms V1.5.1
zzcms is a free open source website building system, mainly facing the majority of webmasters to use, do not need authorization, can be free of charge commercially. zzzcms V1.5.1 sa.php file in the command execution vulnerability, an attacker can use the vulnerability to obtain server control...
Code execution vulnerability in Ocean CMS (CNVD-2021-25369)
Ocean CMS, also known as SEACMS, is completely open source and free of charge, adaptive to computers, cell phones, tablets, APP multi-terminal, no encryption, more secure, it is your best station-building tool! Ocean CMS code execution vulnerabilities, attackers can use the vulnerability to obtai...
Code execution vulnerability in Ocean CMS (CNVD-2021-25370)
Ocean CMS, also known as SEACMS, is completely open source and free of charge, adaptive to computers, cell phones, tablets, APP multi-terminal, no encryption, more secure, it is your best station-building tool! Ocean CMS code execution vulnerabilities, attackers can use the vulnerability to obtai...
UFIDA Software Corporation UFIDA U8 Remote Existence Command Execution Vulnerability
UFIDA is an integrated, converged and ecological enterprise cloud service provider. A command execution vulnerability exists in UFIDA U8 Remote of UFIDA Software Corporation, which can be exploited by attackers to gain control of a server...
Command Execution Vulnerability in Douxin of Shenzhen Renxin Technology Co.
Douxin is a WeChat open framework developed by Shenzhen Renxin Technology Co. A command execution vulnerability exists in Shenzhen RenWant Technology Limited Douxin, which can be exploited by an attacker to gain control of a web server...
File Upload Vulnerability in VisualField SC***.exe Component at Zhejiang ZDZ Information Technology Co.
VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A file upload vulnerability exists in the VisualField SC.exe component of Zhejiang ZDAC Information Technology Co. Ltd, which can be exploited by an attacker to...
Code Execution Vulnerabilities in Knight CMS Backend of Taiyuan Xunyi Technology Co.
Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS code execution vulnerabilities exist in the background. Attackers can exploit the vulnerability to obtain control of the server...
CVE-2020-35339
In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...
Remote code execution
In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...
CVE-2020-35339
CVE-2020-35339 affects 74CMS version 5.0.1. A remote code execution vulnerability exists in the files /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php, allowing an attacker to obtain server permissions and control the server. The issue is documented with...
Command Execution Vulnerability in Chengdu Zero Takeoff Network 07FLY-CRM V1
07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...
Chengdu Zero Takeoff Network 07FLY-CRM V1 Exists File Upload Vulnerability
07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...
File Upload Vulnerability in Zero Takeoff Customer Relationship Management System
Chengdu Zero Takeoff Network is an information service provider, mainly dedicated to the Internet basic business, website construction, management system, software customization, optimization and promotion, e-commerce operations and other full range of information technology services. There is a...
Windows Defender AMSI has a binary vulnerability
Microsoft English name: Microsoft; Chinese name: Microsoft Corporation or American Microsoft Corporation is an American multinational technology company that focuses on the business of developing, manufacturing, licensing, and providing a wide range of computer software services. A binary...
XML Entity Injection Vulnerability in Training and Exam System of Beijing Yunfan Internet Technology Co.
Beijing Yunfan Internet Technology Co., Ltd. business scope includes: technology development, technology promotion, technology transfer, technology consulting, technical services and so on. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists XML entity injection...
File Upload Vulnerability in E-office OA Self-service Platform of Shanghai Panmicro Network Technology Co.
E-office OA self-service platform is a professional collaborative OA software for small and medium-sized organizations. A file upload vulnerability exists in the E-office OA self-service platform of Shanghai Panmicro Network Technology Co., Ltd. that can be exploited by an attacker to gain contro...
Command Execution Vulnerability in Kingdee KIS Flagship Edition of Kingdee Software Ltd.
Kingdee KIS is an ERP software. A command execution vulnerability exists in Kingdee KIS Flagship Edition of Kingdee Software Limited, which can be exploited by an attacker to gain server control privileges...
File Uploading Vulnerability in the Web-based Training Platform of Beijing Boswell Information Technology Co.
Ltd. is one of the "one-stop" providers of e-learning, online examination and knowledge management software products and their total solutions. A file upload vulnerability exists in the online training platform of Beijing Boshiway Information Technology Co., Ltd, which can be exploited by attacke...
Ltd. into the cloud cms there are file upload vulnerability
Shenzhen Jin Yun Software Technology Co., Ltd. mainly provides services such as Internet software development, including mobile APP, mobile webpage, WeChat public platform services, cloud services and so on. Ltd. into the cloud cms file upload vulnerability, attackers can use the vulnerability to...