Command Execution Vulnerability in Tplay Backend

Tplay is a backend management framework based on ThinkPHP 5.0.13 + layui2.2.45 + Mysql development, PHP version required to upgrade to 5.5. A command execution vulnerability exists in Tplay backend. An attacker can exploit this vulnerability to gain server privileges...

XSS Vulnerability in ShuipFCMS

ShuipFCMS is a content management system based on ThinkPHP framework as the core and developed in an independent grouping approach. ShuipFCMS suffers from an XSS vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

NoneCMS ThinkPHP Framework Remote Code Execution

A remote code execution vulnerability exists in NoneCMS ThinkPHP Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Command Execution Vulnerability in the Backend of Wild Rain Novel CMS (CNVD-2020-68554)

Wild Rain Fiction Content Management System provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Rain Novel cms backend command execution vulnerability , attackers can use the vulnerability to obtain server privileges...

Arbitrary File Read Vulnerability in Im***.php File on Qibo's New X1.0 System

Zibo's new X1.0 system is a website management system based on the latest thinkphp5 framework. There is an arbitrary file read vulnerability in the Im.php file of the Qibo New X1.0 system. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in 115CMS Backend Ad***.php File

115CMS is a content management system developed on ThinkPHP framework. A SQL injection vulnerability exists in the Ad.php file in the 115CMS backend. An attacker can exploit the vulnerability to obtain sensitive database information...

File Upload Vulnerability in ShuipFCMS Content Management System

ShuipFCMS a content management system based on ThinkPHP framework as the core, using an independent grouping approach to development. ShuipFCMS has an arbitrary file upload vulnerability that can be exploited by an attacker to gain administrative privileges on the server...

MileagePHP open-source blog system with arbitrary directory recursive deletion vulnerability

MileagePHP open source blogging system using Thinkphp framework, with easy to read, easy to use and so on. MileagePHP open source blog system has an arbitrary directory recursive deletion vulnerability , an attacker can use the vulnerability for arbitrary directory recursive deletion...

Command Execution Vulnerability in the Backend of Guojiz International Web Site Navigation System

Guojiz International Website Navigation System is developed by ThinkPHP5.0+PHP7.0+Mysql+Apache/Nginx/iis, which is suitable for small and medium-sized webmasters to build a CMS program. Guojiz international web site navigation system backend command execution vulnerability, attackers can use the...

SQL Injection Vulnerability in Guojiz International Website Navigation System

Guojiz International Website Navigation System is developed by ThinkPHP5.0+PHP7.0+Mysql+Apache/Nginx/iis, which is suitable for small and medium-sized webmasters to build a CMS program. Guojiz International Website Navigation System has a SQL injection vulnerability, which can be exploited by...

Command Execution Vulnerability in EyouCms of Hainan Zanzan Network Technology Co. Ltd (CNVD-2020-47671)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. Hainan Zanzan Network Technology Co., Ltd. EyouCms there is a command execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

XSS Vulnerability in 115cms 2.0

115cms is developed with the face of the most popular current ThinkPHP framework, which is an efficient and open source content management system. 115cms 2.0 has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...

File Upload Vulnerability in HulaCWMS v2.0.1 at Qingdao Scorch Culture Media Co.

HulaCWMS Hula enterprise website management system is based on ThinkPHP5 framework for the development of enterprise website management system. HulaCWMS v2.0.1 has a file upload vulnerability that can be exploited by attackers to construct specific file packages, upload malicious files, and gain...

TuziCMS v3.0 Mo*** Us***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Mo Us.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

TuziCMS v3.0 Ma*** Ph***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ma Ph.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

TuziCMS v3.0 Ma*** Ba***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ma Ba.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

TuziCMS v3.0 Ma*** Li***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ma Li.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

TuziCMS v3.0 Ma*** Pr***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ma Pr.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

TuziCMS v3.0 Ma*** Pa***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ma Pa.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

TuziCMS v3.0 Ho*** Us***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ho Us.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...