Code Execution Vulnerability in UQCMS B2B2C Multi-merchant E-commerce System Backend Templates

B2B2C multi-merchant e-commerce system is combined with years of e-commerce development experience to launch the B2B2C multi-store system. There is a code execution vulnerability in the backend template of UQCMS B2B2C Multi-merchant E-commerce System. Attackers can use this vulnerability to write...

Monxin Netcom Mall System v4.0 Exists Arbitrary File Upload Vulnerability

Monxin all-network mall system is a mall management system based on PC mall + cell phone mall + WeChat mall + offline cashier, members / orders / commodities / inventory online and offline real-time synchronization of data across the network. Monxin v4.0 there are arbitrary file upload...

Code Execution Vulnerability in Micro Window CMS (Vwins) v3.0

Micro Window CMS Vwins is a free and open source microsoft public and paypal service window management platform system. A code execution vulnerability exists in version v3.0 of Vwins CMS Vwins. The vulnerability stems from improper filtering of incoming parameters when modifying the configuration...

Code execution vulnerability in HAIRUICMS v2.1.4 /FileManage/fsoedit.asp file

HAIRUICMS HAIRUICMS is developed by HAIRUICMS based on Microsoft ASP and general ACCESS/MSSQL database. HAIRUICMS v2.1.4 /FileManage/fsoedit.asp file has a code execution vulnerability. An attacker can exploit the vulnerability to directly edit scripts to write Trojan horses and obtain a webshell...

YUNUCMS v1.0.7 Code Execution Vulnerabilities in controller\Wap.php and controller\Url.php Pages

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A code execution vulnerability exists in the YUNUCMS controller\Wap.php and controller\Url.php pages. An attacker can exploit the...

zzcms v1.5.3.0129 version exists arbitrary file editing vulnerability

ZZCMS is an enterprise website builder. zzzcms v1.5.3.0129 version of the existence of arbitrary file editing vulnerability. The vulnerability stems from the fact that the file name, file path and file content of the file to be modified are not filtered, leading to a vulnerability that can be...

File upload vulnerability in QYKCMS version 4.3.2 (CNVD-2018-05664)

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS version 4.3.2 file upload vulnerability exists, the vulnerability stems from the content of the uploaded zip backup file is not filtered, the attacker can use the vulnerability to obtain webshe...

Code Execution Vulnerability in xyhcms v3.5

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. xyhcms v3.5 version of the code execution vulnerabilities , attackers can exploit the vulnerability to insert a sentence Trojan horse to obtain the website webshell...

Code Execution Vulnerability in CwCms v1.8

CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. A code execution vulnerability exists in CwCms v1.8, which is due to the system failing to effectively filter input parameters. An attacker can exploit this vulnerability to upload a...

Code Execution Vulnerability in SchoolCMS v2.3

SchoolCMS is a school teaching management system based on PHP+MySQL. A code execution vulnerability exists in SchoolCMS v2.3, which is due to the system failing to effectively filter some of the input parameter values. An attacker can exploit this vulnerability to upload a Trojan horse file and...

Code Execution Vulnerability in LvyeCms Version v3.1

LvyeCms 旅烨cms is a php content management system based on ThinkPHP. A code execution vulnerability exists in LvyeCms v3.1, which is caused by the system failing to adequately filter input parameters and values in cached files. An attacker can exploit this vulnerability to upload a Trojan horse fi...

LvyeCms v3.1 has an arbitrary file write vulnerability

LvyeCms 旅烨cms is a php content management system based on ThinkPHP. LvyeCms v3.1 version exists arbitrary file write vulnerability, the vulnerability is due to the system fails to fully filter the incoming file content and path parameters. An attacker can use this vulnerability to upload Trojan...

Code Execution Vulnerability in WANCMS v1.0

WANCMS is a content management system that uses php+mysql program source code. A code execution vulnerability exists in WANCMS v1.0 due to the system failing to effectively filter some input parameter values. An attacker can exploit this vulnerability to upload a Trojan horse file and obtain a...

File Renaming Vulnerability in CMS Made Simple v2.2.5

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. A file renaming vulnerability exists in CMS Made Simple v2.2.5 due to the system failing to effectively filter input parameters. An attacker can exploit this vulnerability to...

Code Execution Vulnerability in LzCMS v1.1.4

LzCMS Lao Zhang Content Management System is a simple blog system made by ThinkPHP+layui. A code execution vulnerability exists in LzCMS v1.1.4, which is due to the system failing to effectively filter data written to cache files. Attackers can use this vulnerability to upload Trojan horse files...

Code Execution Vulnerability in SentCMS v3.0.1707

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. A code execution vulnerability exists in SentCMS v3.0.1707, which is caused by the system failing to effectively filter data written to cache files. An attacker can u...

Code Execution Vulnerability in Rice CMS v5.9.9

DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. A code execution vulnerability exists in Daimi CMS v5.9.9, which is caused by the...

File upload vulnerability in ShopsN v2.2.5 official front-end AppUploadController.class.php page

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system. ShopsN v2.2.5 official version of the front AppUploadController.class.php page file upload...

Arbitrary File Creation Vulnerability in YidaCMS Web Management System JS1.8.0 Version

YidaCMS website management system is a simple, practical and efficient website builder. YidaCMS website management system JS1.8.0 version exists arbitrary file creation vulnerability, the attacker through the creation of parsable script file, edit and save the Trojan code will be injected into th...

File upload vulnerability in ourphp v1.8.0

Ourphp website building system is a php+mysql website building system. ourphp v1.8.0 version of the existence of file upload vulnerability, attackers can be edited through the background online template comes with the upload point to upload any suffix file and write a script Trojan, so as to obta...