EUVD-2019-17829

Malware in sbrugna...

EUVD-2019-2479

Malware in sbrugna...

CVE-2019-10684

Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...

CVE-2019-10684

The CVE-2019-10684 entry affects 74cms v5.0.1, where Application/Admin/Controller/ConfigController.class.php exposes a remote PHP code execution flaw. The vulnerability is triggered via the index.php?m=Admin&c=config&a=edit site_domain parameter, enabling an attacker to run arbitrary PHP code on ...

CVE-2019-10684: Improper Control of Generation of Code

Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...

CVE-2019-8439: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of "System setting-site setting" of admin/index.php, aka sitedomain...