|
210801
|
9.8 |
CRITICAL
Network
|
opensns
|
opensns
|
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter.
|
CWE-89
SQL Injection
|
CVE-2020-21725
|
2024-11-21 14:12 |
2021-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210802
|
9.8 |
CRITICAL
Network
|
thinkphp50-cms_project
|
thinkphp50-cms
|
ThinkPHP50-CMS v1.0 contains a remote code execution (RCE) vulnerability in the component /public/?s=captcha.
|
NVD-CWE-noinfo
|
CVE-2020-21865
|
2024-11-21 14:12 |
2021-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210803
|
6.5 |
MEDIUM
Network
|
wdja
|
wdja_cms
|
A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.
|
CWE-352
Origin Validation Error
|
CVE-2020-21658
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210804
|
5.4 |
MEDIUM
Network
|
xyhcms
|
xyhcms
|
XYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php?s=/Link/index.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21656
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210805
|
7.2 |
HIGH
Network
|
emlog
|
emlog
|
emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file.
|
NVD-CWE-noinfo
|
CVE-2020-21654
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210806
|
9.1 |
CRITICAL
Network
|
myucms_project
|
myucms
|
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-21653
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210807
|
9.8 |
CRITICAL
Network
|
myucms_project
|
myucms
|
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.
|
CWE-94
Code Injection
|
CVE-2020-21652
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210808
|
9.8 |
CRITICAL
Network
|
myucms_project
|
myucms
|
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.
|
CWE-94
Code Injection
|
CVE-2020-21651
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210809
|
8.8 |
HIGH
Network
|
myucms_project
|
myucms
|
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.
|
CWE-94
Code Injection
|
CVE-2020-21650
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210810
|
8.1 |
HIGH
Network
|
myucms_project
|
myucms
|
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-21649
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|