70 matches found
CVE-2018-9922
An issue was discovered in idreamsoft iCMS through 7.0.7. Physical path leakage exists via an invalid nickname field that reveals a core/library/weixin.class.php pathname...
idreamsoft iCMS Physical Path Disclosure Vulnerability
iCMS is an efficient and simple content management system built with PHP and MySQL. A physical path leak vulnerability exists in idreamsoft iCMS version 7.0.7 and lower. An attacker can obtain the physical path by displaying an invalid nickname field in the core/library/weixin.class.php pathname...
finecms Weixin.php file cross-site scripting vulnerability
finecms is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the Weixin.php file in finecms version 5.0.10. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
Arbitrary Code Write Vulnerability in SeaCMS admin/admin_weixin.php File
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. An arbitrary code write vulnerability exists in the admin/adminweixin.php file in SeaCMS version v6.5.8, which can be exploited by an attacker...
CVE-2017-1000429
rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php...
CVE-2017-11586
dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php...
weixin.17house.com XSS vulnerability
Vulnerable URL: http://weixin.17house.com/weixin/api.php?callback=prompt/OPENBUGBOUNTY/...
phpyun v4.0 app\controller\weixin\index.class.php SQL注入漏洞
No description provided by source...
MCMS 3.1.3 最新版sql注入与任意文件读取
简要描述： rt 详细说明： 先看看任意文件读取。 上次提交的这个 WooYun: mcms v3.1.0 sql注入+任意文件读取。 厂商的做法是 $wx=new weixin; $GET = H::sqlxss$GET; $POST = H::sqlxss$POST; ........... function responsemsg global $dbm,$C; $postStr = $GLOBALS"HTTPRAWPOSTDATA"; if!empty$postStr $postObj = simplexmlloadstring$postStr,...