CVE-2026-108811

A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made available to the public a...

EUVD-2026-97284

A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made available to the public a...

CVE-2026-108811 WMCMS index.php information disclosure

A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made available to the public a...

CVE-2026-108811

A vulnerability exists in WMCMS 4.446.1257 where an unknown function within the /index.php file is susceptible to information disclosure . This issue arises from the manipulation of the path/file argument , which can be triggered remotely. Public exploit code for this vulnerability has been made ...

CVE-2026-108811: Exposure of Sensitive Information to an Unauthorized Actor

A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made available to the public a...

CVE-2024-27489

An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...

CVE-2024-27489

An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...

CVE-2024-27489

An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...

PT-2024-21919 · Wmcms · Wmcms

Name of the Vulnerable Software and Affected Versions: WMCMS version 4.4 Description: An issue in the DelFile function allows attackers to delete arbitrary files via a crafted POST request. Recommendations: For WMCMS version 4.4, consider disabling the DelFile function until a patch is available ...

CVE-2024-27489

The WMCMS v4.4 software contains a vulnerability in the DelFile() function. This issue allows an unauthenticated attacker to perform arbitrary file deletion by sending a crafted POST request . The vulnerability is associated with CWE-473 (PHP External Variable Modification) and CWE-791 (Incomplet...

CVE-2024-27489

An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...

CVE-2024-27489

An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...

CVE-2024-27489: PHP External Variable Modification

An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...

Command Execution Vulnerability in WMCMS

WMCMS is based on PHP MYSQL as the core development, free open source professional Chinese labeling system. WMCMS command execution vulnerability , an attacker can use the vulnerability to obtain control of the server...

WMCMS suffers from a file upload vulnerability (CNVD-2021-24931)

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS file upload vulnerability can be exploited to gain control of the server...

Arbitrary File Deletion Vulnerability in WMCMS (CNVD-2021-13595)

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file deletion vulnerability , an attacker can exploit the vulnerability to delete any file under the server...

Code Execution Vulnerability in WMCMS of Chongqing Yuyue Optoelectronics Technology Co. Ltd (CNVD-2020-75026)

WMCMS is based on PHP MYSQL as the core development, free and open source professional Chinese labeling system. WMCMS has a code execution vulnerability. Attackers can use this vulnerability to obtain server administrative privileges...

SQL injection vulnerability in WMCMS Pro da***.my***.php file

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. There is a SQL injection vulnerability in the file da.my.php in the professional version of WMCMS. Attackers can use this vulnerability to obtain server administrative privileges...

WMCMS open source novel system V4.367.977 exists arbitrary file reading vulnerability

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS open source novel system V4.367.977 arbitrary file reading vulnerability , attackers can use the vulnerability to obtain sensitive information...

Arbitrary File Read Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file reading vulnerability, an attacker can exploit the vulnerability to read files under the server...