8 matches found
wtcms SQL注入漏洞
wtcms is a ThinkPHP-based content management system CMS by Taosir Individual Developer. An SQL injection vulnerability exists in wtcms, which stems from incorrect manipulation of the parameter ids in the file application/Comment/Controller/CommentadminController.class.php, which could lead to SQL...
nbnbk 代码问题漏洞
nbnbk is based on thinkphp5 cms management system , B2C e-commerce open source php mall system platform , tp5 open source cms , thinkphp enterprise website source code for blogs , small and medium-sized enterprises to build a station secondary development . nbnbk There is a security vulnerability...
WTCMS 跨站脚本漏洞
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the WTCMS page management backend. An attacker can exploit the vulnerability to obtain a cookie by entering a specially crafted payload into the search box...
NoneCMS Information Disclosure Vulnerability (CNVD-2021-45763)
NoneCMS is a content management system CMS based on Thinkphp. An information disclosure vulnerability exists in NoneCMS version 1.3. A remote attacker can exploit this vulnerability to obtain sensitive information via /public/index.php...
SQL Injection Vulnerability in TPCMS
TPCMS is an open source cms written by thinkphp. TPCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
WTCMS suffers from a file upload vulnerability (CNVD-2020-47243)
WTCMS is a content management system CMS based on Thinkphp. WTCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...
SQL Injection Vulnerability in the Raining Novels cms Ne***.phpp File
Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. A SQL injection vulnerability exists in the Ne.phpp file of the Drizzle Novel cms. An attacker can exploit this vulnerability to obtain database information...
Hsycms SQL Injection Vulnerability
Hsycms is a content management system CMS based on ThinkPHP. The system has features such as in-site linking, site map, full-site pseudo-static and custom URL URLs. A SQL injection vulnerability exists in Hsycms V1.1. The vulnerability stems from the lack of validation of externally entered SQL...