4 matches found
CVE-2026-30637: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before. The vulnerability allows remote attackers to craft HTTP requests, without authentication, containing a URL pointing to internal services or any remote server...
OTCMS 代码问题漏洞
OTCMS OTCMS is a content management system CMS for article-based websites from OTCMS. A code issue vulnerability exists in OTCMS version 7.46 and prior versions, which stems from /admin/read.php containing a server-side request forgery issue...
CVE-2024-57252: Server-Side Request Forgery (SSRF)
OtCMS =V7.46 is vulnerable to Server-Side Request Forgery SSRF in /admin/read.php, which can Read system files arbitrarily...
CVE-2023-3238: Server-Side Request Forgery (SSRF)
A vulnerability, which was classified as critical, has been found in OTCMS up to 6.62. This issue affects some unknown processing of the file /admin/read.php?mudi=getSignal. The manipulation of the argument signalUrl leads to server-side request forgery. The attack may be initiated remotely. The...