Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2020-22203

Disclosure Date: June 16, 2021 (last updated February 22, 2025)
SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php.
Attack Vector: NetworkPrivileges: NoneUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2020-22201

Disclosure Date: June 16, 2021 (last updated February 22, 2025)
phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php.
Attack Vector: NetworkPrivileges: LowUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2018-19127

Disclosure Date: November 09, 2018 (last updated November 27, 2024)
A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cache_template/*.tpl.php file along with a "<?php function " substring.
0
0
Attacker Value
Unknown

CVE-2011-0644

Disclosure Date: January 25, 2011 (last updated October 04, 2023)
SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flash_upload.php.
0
0
Attacker Value
Unknown

CVE-2011-0645

Disclosure Date: January 25, 2011 (last updated October 04, 2023)
SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the where_time parameter in a get action.
0
0