Wtcms Project

Wtcms

15 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2019-8908

Exploit
  • EPSS 0.84%
  • Published 18.02.2019 18:29:00
  • Last modified 21.11.2024 04:50:38

An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading an image file, as demonstrated by a .php filename a...

7.5

CVE-2019-8909

Exploit
  • EPSS 0.65%
  • Published 18.02.2019 18:29:00
  • Last modified 21.11.2024 04:50:38

An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) via crafted dimensions for the verification code image.

8.8

CVE-2019-8910

Exploit
  • EPSS 0.15%
  • Published 18.02.2019 18:29:00
  • Last modified 21.11.2024 04:50:38

An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF.

6.1

CVE-2019-8911

Exploit
  • EPSS 0.24%
  • Published 18.02.2019 18:29:00
  • Last modified 21.11.2024 04:50:38

An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website statistics code).

8.8

CVE-2018-10267

Exploit
  • EPSS 0.15%
  • Published 22.04.2018 01:29:01
  • Last modified 21.11.2024 03:41:08

WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=add_post URI.