Ucms Project

Ucms

28 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2023-5015

Exploit
  • EPSS 0.07%
  • Veröffentlicht 17.09.2023 02:15:07
  • Zuletzt bearbeitet 21.11.2024 08:40:53

A vulnerability was found in UCMS 1.4.7. It has been classified as problematic. Affected is an unknown function of the file ajax.php?do=strarraylist. The manipulation of the argument strdefault leads to cross site scripting. It is possible to launch ...

6.1

CVE-2023-2294

Exploit
  • EPSS 0.07%
  • Veröffentlicht 26.04.2023 06:15:09
  • Zuletzt bearbeitet 21.11.2024 07:58:19

A vulnerability was found in UCMS 1.6.0. It has been classified as problematic. This affects an unknown part of the file saddpost.php of the component Column Configuration. The manipulation of the argument strorder leads to cross site scripting. It i...

9.8

CVE-2023-1303

  • EPSS 0.1%
  • Veröffentlicht 09.03.2023 22:15:52
  • Zuletzt bearbeitet 21.11.2024 07:38:52

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted u...

8.8

CVE-2022-42234

Exploit
  • EPSS 0.39%
  • Veröffentlicht 14.10.2022 17:15:17
  • Zuletzt bearbeitet 14.05.2025 15:15:53

There is a file inclusion vulnerability in the template management module in UCMS 1.6

6.1

CVE-2022-38527

Exploit
  • EPSS 0.23%
  • Veröffentlicht 19.09.2022 22:15:11
  • Zuletzt bearbeitet 29.05.2025 16:15:28

UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import function under the Site Management page.

9.8

CVE-2022-38297

Exploit
  • EPSS 0.42%
  • Veröffentlicht 12.09.2022 23:15:08
  • Zuletzt bearbeitet 21.11.2024 07:16:12

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.

9.8

CVE-2022-35426

Exploit
  • EPSS 0.41%
  • Veröffentlicht 10.08.2022 20:15:54
  • Zuletzt bearbeitet 21.11.2024 07:11:08

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

7.5

CVE-2022-28444

Exploit
  • EPSS 0.42%
  • Veröffentlicht 21.04.2022 20:15:11
  • Zuletzt bearbeitet 21.11.2024 06:57:22

UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.

9.1

CVE-2022-28443

  • EPSS 0.35%
  • Veröffentlicht 21.04.2022 20:15:11
  • Zuletzt bearbeitet 21.11.2024 06:57:21

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.

8.8

CVE-2022-28440

Exploit
  • EPSS 0.93%
  • Veröffentlicht 21.04.2022 20:15:11
  • Zuletzt bearbeitet 21.11.2024 06:57:21

An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.