Show filters
16 Total Results
Displaying 1-10 of 16
Sort by:
Attacker Value
Unknown
CVE-2020-20636
Disclosure Date: June 20, 2023 (last updated October 08, 2023)
SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad() function.
0
Attacker Value
Unknown
CVE-2020-22124
Disclosure Date: August 18, 2021 (last updated February 23, 2025)
A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.
0
Attacker Value
Unknown
CVE-2019-17175
Disclosure Date: October 04, 2019 (last updated November 27, 2024)
joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.
0
Attacker Value
Unknown
CVE-2018-14500
Disclosure Date: July 22, 2018 (last updated November 27, 2024)
joyplus-cms 1.6.0 has XSS via the manager/collect/collect_vod_zhuiju.php keyword parameter.
0
Attacker Value
Unknown
CVE-2018-14501
Disclosure Date: July 22, 2018 (last updated November 27, 2024)
manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring.
0
Attacker Value
Unknown
CVE-2018-14388
Disclosure Date: July 18, 2018 (last updated November 27, 2024)
joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can_search_device array parameter.
0
Attacker Value
Unknown
CVE-2018-14389
Disclosure Date: July 18, 2018 (last updated November 27, 2024)
joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.
0
Attacker Value
Unknown
CVE-2018-14334
Disclosure Date: July 17, 2018 (last updated November 27, 2024)
manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of control. Consequently, one can upload and execute a .php file, a similar issue to CVE-2018-8766.
0
Attacker Value
Unknown
CVE-2018-12905
Disclosure Date: June 27, 2018 (last updated November 26, 2024)
joyplus-cms 1.6.0 has XSS in admin_player.php, related to manager/index.php "system manage" and "add" actions.
0
Attacker Value
Unknown
CVE-2018-12039
Disclosure Date: June 07, 2018 (last updated November 26, 2024)
joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php involving use of a "/!select/" substring in place of a select substring.
0
