CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1475 matches found

Vulnrichment•added 2025/10/06 10:2 a.m.•3 views

CVE-2025-11331 IdeaCMS Website Name Config.php command injection

A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...

5.8CVSS6.4AI score0.17354EPSS

SaveExploits1References4

EUVD•added 2025/10/06 10:2 a.m.•6 views

EUVD-2025-32529

5.8CVSS6.2AI score0.17354EPSS

SaveExploits1References5

Positive Technologies•added 2025/10/06 12:0 a.m.•6 views

PT-2025-40888

Name of the Vulnerable Software and Affected Versions IdeaCMS versions up to 1.8 Description A command injection issue exists in IdeaCMS. The issue is located in an unknown function within the app/common/logic/admin/Config.php file of the Website Name Handler component. Manipulation of the 网站名称...

7.2CVSS4.8AI score0.17354EPSS

SaveExploits1References8

CNNVD•added 2025/10/06 12:0 a.m.•6 views

IdeaCMS 命令注入漏洞

IdeaCMS is an open source shopping mall system by IdeaCMS. A command injection vulnerability exists in IdeaCMS 1.8 and earlier versions, which stems from incorrect manipulation of the parameter site name in the file app/common/logic/admin/Config.php, which could lead to a command injection attack...

7.2CVSS5.2AI score0.17354EPSS

SaveExploits1References4

Positive Technologies•added 2025/10/06 12:0 a.m.•17 views

PT-2025-40903

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.13.4 Description SillyTavern is a locally installed user interface for interacting with large language models, image generation engines, and text-to-speech models. The web user interface, in versions prior to...

9.6CVSS7.5AI score0.00236EPSS

SaveExploits0References16

EUVD•added 2025/10/03 8:7 p.m.•11 views

EUVD-2022-3337