Code Execution Vulnerability in SongCMS Backend

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . SongCMS backend code execution vulnerabilities , attackers use the vulnerability to...

Directory Traversal, Code Execution, Arbitrary File Deletion Vulnerabilities in SongCMS Backend

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . SongCMS backend directory traversal , code execution , arbitrary file deletion...

songcms 3.16 /global.php SQL注入漏洞

No description provided by source...

SongCMS enterprise website backstage management system loopholes getshell-a vulnerability warning-the black bar safety net

SongCMS enterprise built Station system is based on ASP+ACCESS/SQL technical site background management system, Suitable for General programmers to develop a variety of personalized corporate website,database and call the function have detailed comments; ewebeditor: inc/ewebeditor/adminlogin. asp...

SongCMS enterprise website backstage management system, several problems result getshell-a vulnerability warning-the black bar safety net

SongCMS enterprise built Station system is based on ASP+ACCESS/SQL technical site background management system, Suitable for General programmers to develop a variety of personalized corporate website,database and call the function have detailed comments; ewebeditor: inc/ewebeditor/adminlogin. asp...

Songcms Sql injection vulnerability and fix-vulnerability warning-the black bar safety net

The filter is not rigorous! ResultSQL injection it! if$WebOpening==0 diehtmlspecialcharsdecode$WebMaintenanceText; $QUERY = pregreplace"/\\:\?"'& lt;\\\\\\\s$/",",$SERVER'QUERYSTRING'; //This regular expression is not rigorous.!!!! Embarrassed$QUERY = explode'/',$QUERY; foreach...