Information leakage vulnerability in PHPSCUP enterprise website building system

PHPSCUP is a lightweight enterprise building system. PHPSCUP enterprise website builder system has an information leakage vulnerability, which can be exploited by attackers to obtain sensitive information...

S-CMS enterprise website building system suffers from SQL injection vulnerability (CNVD-2021-41052)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website builder system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

Arbitrary File Deletion Vulnerability in CMS

Knowledge CMS is an open source website builder. Know CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file directory...

File Upload Vulnerability in Zhiwei CMS

Knowledge CMS is an open source website builder. A file upload vulnerability exists in Know CMS, which can be exploited by attackers to gain control of the server...

Microhome Software Technology (Hangzhou) Co., Ltd. website builder system suffers from an arbitrary file read vulnerability

Microsoft Technology Hangzhou Co., Ltd. is a professional ECM Collaboration Management Software and BPM Business Process Management Software R & D and solution provider. There is an arbitrary file reading vulnerability in the website building system of Microhome Software Technology Hangzhou Co. A...

XSS vulnerability in cyberbiz website builder system

Cyberbiz is to provide a one-stop new retail solution, from the official website rack station, intelligent POS system, to the intelligent warehouse, which can be strung together with multiple gold logistics and so on. There is an XSS vulnerability in the cyberbiz website builder system, which can...

SQL Injection Vulnerability in Website Building System of Lianchuang Internet (Beijing) Technology Co.

Ltd. is a provider of interactive web website building/marketing services. A SQL injection vulnerability exists in the website builder system of Lianchuang Internet Beijing Technology Co. The vulnerability can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in the Website Building System of Lianchuang Internet (Beijing) Technology Limited (CNVD-2021-35865)

Ltd. is a provider of interactive web website building/marketing services. A SQL injection vulnerability exists in the website builder system of Lianchuang Internet Beijing Technology Co. The vulnerability can be exploited by an attacker to obtain sensitive information from the database...

File Upload Vulnerability in Website Building System of Shandong Guozi Software Co.

Shandong Guozi Software Co., Ltd. is a professional application software product development and industry solution provider. A file upload vulnerability exists in the website builder system of Shandong Guozi Software Co. Ltd, which can be exploited by attackers to gain control of the server...

Directusv8 Code Issues Vulnerabilities

Directusv8 is GlobalDirectusv8 open source an application system provides a CMS website builder . A security vulnerability exists in versions prior to Directus 8 8.8.2, which can be exploited by attackers to execute arbitrary code...

Unauthorized Access Vulnerability in Website Building System of Jiangsu Shidewei Network Technology Co.

Ltd. was founded in 2004, is the Shidewei Industrial Group's enterprises. It is an Internet company specializing in enterprise network marketing, e-commerce operation and software development services. An unauthorized access vulnerability exists in the website builder system of Jiangsu Shidewei...

CVE-2021-24202

In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget includes/widgets/heading.php accepts a ‘headersize’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modifie...

CVE-2021-24201

In the Elementor Website Builder WordPress plugin before 3.1.4, the column element includes/elements/column.php accepts an ‘htmltag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified...

Design/Logic Flaw

In the Elementor Website Builder WordPress plugin before 3.1.4, the icon box widget includes/widgets/icon-box.php accepts a ‘titlesize’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modifi...

WordPress插件Elementor Website Builder 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Related Posts is a plugin for adding related content.iframe is an inline frame for embedding another document into the current HTML document.Elementor Page Builder...

WordPress 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

WordPress插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. plugin for WordPress. A security vulnerability exists in the WordPress plugin Elementor Website Builder prior to version 3.1.4 that stems from the heading widget includes/widgets/heading.php accepting the headersize parameter...

WordPress插件Elementor Website Builder 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

WordPress 跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. elementor is a drag-and-drop website builder plugin used in it. A security vulnerability exists in the WordPress plugin...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co. Ltd (CNVD-2021-26011)

Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. There is a SQL injection vulnerability in the website builder system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain...