DamiCMS has an arbitrary file deletion vulnerability

DamiCMS is a content management system CMS for building websites quickly. DamiCMS v6.0.0 has an arbitrary file deletion vulnerability, the vulnerability stems from the failure to filter file parameters in the file deletion operation on the template edit page, which can be exploited by an attacker...

Cross site scripting

admin.php in BigTree through 4.2.18 has a Cross-site Scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching a Home Template Edit Page action and entering the Navigation Title of a page that is scheduled for future publication aka a...