CVE-2023-44847

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...

Design/Logic Flaw

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...

CVE-2023-44847

SeaCMS 12.8 is affected by CVE-2023-44847 due to vulnerability in the admin_Weixin.php component that allows an attacker to execute arbitrary code. The issue is documented across multiple sources (NVD, Red Hat, CNNVD, etc.). Descriptions consistently indicate remote code execution via the admin_W...

CVE-2023-44847

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...

Seacms Injection Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is designed primarily to manage video-on-demand resources.A security vulnerability exists in Seacms v11.6, which stems from a remote code execution RCE vulnerability in the /admin/weixin.php component. No...

CVE-2022-27336

Seacms v11.6 was discovered to contain a remote code execution RCE vulnerability via the component /admin/weixin.php...

Remote code execution

Seacms v11.6 was discovered to contain a remote code execution RCE vulnerability via the component /admin/weixin.php...

CVE-2022-27336

Seacms v11.6 is affected by a remote code execution (RCE) vulnerability in the /admin/weixin.php component. The provided documents confirm an RCE in Seacms 11.6 but do not supply exploited vectors, exact root cause details, or explicit patch/version remediation within the citations. CVSS metrics ...

CVE-2022-27336

Seacms v11.6 was discovered to contain a remote code execution RCE vulnerability via the component /admin/weixin.php...

CVE-2022-27336

Seacms v11.6 was discovered to contain a remote code execution RCE vulnerability via the component /admin/weixin.php...

CVE-2017-1000429

rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php...

CVE-2017-1000429

Summary: CVE-2017-1000429 affects the CMS finecms 5.0.10 via a reflected XSS in the file Weixin.php . The vulnerability stems from insecure handling of input that is reflected back in the response, enabling arbitrary script injection. Multiple connected records (NVD/NVD-derived entries and nation...

CVE-2017-1000429

rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php...

Code injection

dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php...

CVE-2017-11586

dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php...

CVE-2017-11586

FineCMS 5.0.9 contains an open redirect vulnerability exploitable via the url parameter in a sync action, linked to controllers/Weixin.php. The NVD entry CVE-2017-11586 documents URL Redirector Abuse with CVSS 3.0 score 6.1 (NETWORK, PR:N, UI:R). Nuclei templates corroborate an open redirect cond...

CVE-2017-11586

dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php...

74CMS 3.4 /plus/weixin.php 任意文件下载漏洞

No description provided by source...

74cms (20140709) 任意文件读取 & 注入漏洞

简要描述： 20140709. 详细说明： 20140709的74cms 在plus/weixin.php中 因为默认的这个文件都会checkSignature 来检测token 但是来看看74cms的 根本就不需要token。 $wechatObj = new wechatCallbackapiTest$dbhost,$dbuser,$dbpass,$dbname; ifisset$REQUEST'echostr' $wechatObj-valid; elseifisset$REQUEST'signature' $wechatObj-responseMsg; 来看看valid publ...

74cms某功能注入漏洞（有条件）

简要描述： 略鸡肋,分享出来。 详细说明： 最新版v3.4，更新时间20140310 文件/plus/weixin.php responseMsg函数，使用 $postStr = $GLOBALS"HTTPRAWPOSTDATA"; 获得了post数据。所以，可以无视GPC。 获得的数据是XML格式，我们一会发送数据包即可。 继续看该函数： if !empty$postStr $postObj = simplexmlloadstring$postStr, 'SimpleXMLElement', LIBXMLNOCDATA; $fromUsername =...