|
213071
|
9.8 |
CRITICAL
Network
|
myucms_project
|
myucms
|
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.
|
CWE-94
Code Injection
|
CVE-2020-21652
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213072
|
9.8 |
CRITICAL
Network
|
myucms_project
|
myucms
|
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.
|
CWE-94
Code Injection
|
CVE-2020-21651
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213073
|
8.8 |
HIGH
Network
|
myucms_project
|
myucms
|
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.
|
CWE-94
Code Injection
|
CVE-2020-21650
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213074
|
8.1 |
HIGH
Network
|
myucms_project
|
myucms
|
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-21649
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213075
|
9.1 |
CRITICAL
Network
|
wdja
|
wdja_cms
|
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php.
|
NVD-CWE-noinfo
|
CVE-2020-21648
|
2024-11-21 14:12 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213076
|
6.1 |
MEDIUM
Network
|
waimai_super_cms_project
|
waimai_super_cms
|
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21506
|
2024-11-21 14:12 |
2021-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213077
|
6.1 |
MEDIUM
Network
|
waimai_super_cms_project
|
waimai_super_cms
|
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21505
|
2024-11-21 14:12 |
2021-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213078
|
6.1 |
MEDIUM
Network
|
waimai_super_cms_project
|
waimai_super_cms
|
waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21504
|
2024-11-21 14:12 |
2021-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213079
|
7.5 |
HIGH
Network
|
waimai_super_cms_project
|
waimai_super_cms
|
waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parame…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-21503
|
2024-11-21 14:12 |
2021-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213080
|
6.1 |
MEDIUM
Network
|
xiuno
|
xiunobbs
|
A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21496
|
2024-11-21 14:12 |
2021-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|