YFCMF Remote Command Execution Vulnerability

YFCMF is Hunan Renren Technology Co., Ltd. developed a set of back-end content management framework based on ThinkPHP5.1. + foreign ACE1.40 UI template. A remote command execution vulnerability exists in YFCMF v2.3.1. An attacker can exploit this vulnerability by sending a constructed POST messag...

Deserialization vulnerability in kitecms

KiteCMS is an open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development of the system, for individuals and enterprises to quickly build a station and development needs. Kitecms has a deserialization vulnerability that can be...

RGCMS suffers from a file upload vulnerability (CNVD-2021-03290)

RGCMS RuiGu content management system is a set of open source building management system , using PHP language , written in the framework of Thinkphp5.1. , the database using MYSQL database . RGCMS file upload vulnerability , an attacker can use this vulnerability to obtain control of the server...