PT-2026-34598

Name of the Vulnerable Software and Affected Versions CI4MS Theme affected versions not specified Description The upload function in CI4MS Theme fails to validate entry names when extracting user-uploaded ZIP archives. This allows an authenticated backend user with theme create permissions to...

Arbitrary Code Execution Vulnerability in MOMOCMS

MoMoCMS is an enterprise building system developed by php+MySQL. An arbitrary code execution vulnerability exists in version 5.6.1 of the MoMoCMS enterprise website builder system. It allows attackers to exploit the vulnerability to execute task code and write shell.php file in the web root...