Xiaocheng-keji

71cms

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.6

CVE-2024-25187

Exploit
  • EPSS 0.86%
  • Published 02.04.2024 04:15:12
  • Last modified 10.06.2025 00:46:34

Server Side Request Forgery (SSRF) vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html.

6.1

CVE-2024-25166

  • EPSS 0.22%
  • Published 27.02.2024 01:15:07
  • Last modified 23.05.2025 15:41:53

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file.