# CMS-Hunter

**Repository Path**: csharphpython/CMS-Hunter

## Basic Information

- **Project Name**: CMS-Hunter
- **Description**: CMS漏洞测试用例集合
- **Primary Language**: Unknown
- **License**: GPL-3.0
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2020-10-21
- **Last Updated**: 2020-12-19

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# CMS-Hunter

### 简介

Content Management System Vulnerability Hunter

> 说明：目前来看，本项目会进行长期维护，有修改的建议或者想法欢迎联系作者。

***

### CMS 漏洞列表



#### Discuz

- [Discuz_＜3.4_birthprovince_前台任意文件删除](Discuz/Discuz_＜3.4_birthprovince_前台任意文件删除)

#### DedeCMS

- [DedeCMS_v5.7_shops_delivery_存储型XSS](DedeCMS/DedeCMS_v5.7_shops_delivery_存储型XSS)
- [DedeCMS_v5.7_carbuyaction_存储型XSS](DedeCMS/DedeCMS_v5.7_carbuyaction_存储型XSS)
- [DedeCMS_v5.7_友情链接CSRF_GetShell](DedeCMS/DedeCMS_v5.7_友情链接CSRF_GetShell)
- [DedeCMS V5.7 SP2后台存在代码执行漏洞](/DedeCMS/DedeCMS%20V5.7%20SP2后台存在代码执行漏洞)

#### Drupal

- [Drupal远程代码执行漏洞(CVE-2017-6920)](Drupal/Drupal远程代码执行漏洞(CVE-2017-6920))

#### FineCMS
- [FineCMS最新版5.0.8两处getshell](https://github.com/SecWiki/CMS-Hunter/tree/master/FineCMS/FineCMS%E6%9C%80%E6%96%B0%E7%89%885.0.8%E4%B8%A4%E5%A4%84getshell)

#### Joomla!
- [Joomla_3.7.0_SQL注入(CVE-2017-8917)](Joomla/Joomla_3.7.0_SQL注入(CVE-2017-8917))
- [Joomla_3.4.4-3.6.3_未授权创建特权用户(CVE-2016-8869)](Joomla/Joomla_3.4.4-3.6.3_未授权创建特权用户(CVE-2016-8869))

#### Metinfo

- [metinfo多个漏洞](/Metinfo/MetInfo%20V5.1.7)

#### Seacms

- [SeaCMS v6.45前台Getshell 代码执行](https://github.com/SecWiki/CMS-Hunter/tree/master/seacms/SeaCMS%20v6.45%E5%89%8D%E5%8F%B0Getshell%20%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C)

- [seacms6.54代码执行](https://github.com/SecWiki/CMS-Hunter/tree/master/seacms/seacms6.54%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C)

- [seacms 6.55 代码执行](https://github.com/SecWiki/CMS-Hunter/tree/master/seacms/seacms%206.55%20%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C)

- [seacms6.61 XSS](https://github.com/SecWiki/CMS-Hunter/blob/master/seacms/seacms6.61/seacms661.md)

- [Seacms6.61后台getshell](https://github.com/SecWiki/CMS-Hunter/blob/master/seacms/seacms6.61/seacms.md)

  

#### Struts

- [S2-048(CVE-CVE-2017-9791)](Struts/S2-048(CVE-CVE-2017-9791))

#### ThinkPHP

- [ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷](ThinkPHP/ThinkPHP_3.2.3-5.0.10_缓存函数设计缺陷)

#### ThinkSNS

- [ThinkSNS_V4 后台任意文件下载导致Getshell](/ThinkSNS/ThinkSNS_V4)

#### WordPress
- [WordPress_4.4_SSRF](WordPress/WordPress_4.4_SSRF)

- [WordPress_4.7_Info_Disclosure](WordPress/WordPress_4.7_Info_Disclosure)

- [WordPress_4.7.0-4.7.1_未授权内容注入](WordPress/WordPress_4.7.0-4.7.1_未授权内容注入)

- [[Wordpress <= 4.9.6 任意文件删除漏洞](https://github.com/SecWiki/CMS-Hunter/blob/master/WordPress/Wordpress%20%3C%3D%204.9.6%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4%E6%BC%8F%E6%B4%9E/Wordpress%20%3C%3D%204.9.6%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4%E6%BC%8F%E6%B4%9E.md)

  

#### PHPCMS
- [PHPCMS_v9.6.0_SQL注入](PHPCMS/PHPCMS_v9.6.0_SQL注入)
- [PHPCMS_v9.6.0_任意文件上传](PHPCMS/PHPCMS_v9.6.0_任意文件上传)
- [PHPCMS_v9.6.1_任意文件下载](PHPCMS/PHPCMS_v9.6.1_任意文件下载)
- [PHPCMS_v9.6.2_任意文件下载](PHPCMS/PHPCMS_v9.6.2_任意文件下载)

#### WebLogic

- [CVE-2017-3506 & CVE-2017-10271 XmlDecoder](https://github.com/SecWiki/CMS-Hunter/tree/master/WebLogic/CVE-2017-3506%20%26%20CVE-2017-10271)
- [CVE-2018-2628 T3 Deserialize](https://github.com/SecWiki/CMS-Hunter/tree/master/WebLogic/CVE-2018-2628)
- [CVE-2018-2628 bypassing CVE-2018-2893 T3 Deserialize](https://github.com/SecWiki/CMS-Hunter/tree/master/WebLogic/CVE-2018-2893)


### 项目维护

+ **ourren**(sina weibo <a href="http://weibo.com/codesec">@ourren</a>)
+ **Anka9080**(sina weibo <a href="http://weibo.com/anka9080">@Anka9080</a>)
+  **sie504** 
+  **Bearcat**

### 免责说明

请勿用于非法的用途，否则造成的严重后果与本项目无关。

### 参考链接

- [CxSecurity](https://cxsecurity.com)
- [Seebug](https://www.seebug.org/)

### 转载

转载请注明来自 https://github.com/SecWiki/CMS-Hunter

### 补充完善

欢迎大家补充完善　[Anka9080@foxmail.com](Anka9080@foxmail.com)

&copy;<a href="https://www.sec-wiki.com" target="_blank">SecWiki</a> 2017