CVE-2022-24603: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection in /admin/news/sortmod.php...

PT-2022-16756

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue affects Luocms, where Cross Site Scripting XSS is present in the /admin/news/sort add.php and /inc/function.php files. Recommendations For Luocms version 2.0, as a temporary workaround, consider...

PT-2022-16755

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue is related to SQL Injection in the /admin/news/news ok.php endpoint. Recommendations For Luocms version 2.0, as a temporary workaround, consider restricting access to the /admin/news/news ok.php endpoin...

CVE-2022-24600: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements...

CVE-2022-24606: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection in /admin/news/sortok.php...

CVE-2022-24602: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection in /admin/news/newsmod.php...

PT-2022-16757

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue is related to incorrect access control. An attacker can exploit this by writing an arbitrary shell file through the "/admin/templates/template manage.php" API endpoint. Recommendations For Luocms versio...

PT-2022-16753

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue is related to SQL Injection in the /admin/link/link ok.php endpoint. Recommendations For Luocms version 2.0, as a temporary workaround, consider restricting access to the /admin/link/link ok.php endpoin...

CVE-2022-24609: Incorrect Authorization

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/templatemanage.php, an attacker can write an arbitrary shell file...

CVE-2022-24601: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection in /admin/manager/adminmod.php. An attacker can obtain sensitive information through SQL injection statements...

CVE-2022-24608: Improper Neutralization of Input During Web Page Generation

Luocms v2.0 is affected by Cross Site Scripting XSS in /admin/news/sortadd.php and /inc/function.php...

CVE-2022-24607: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection in /admin/news/newsok.php...

CVE-2022-24605: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection in /admin/link/linkok.php...

CVE-2022-24604: Improper Neutralization of Special Elements used in an SQL Command

Luocms v2.0 is affected by SQL Injection in /admin/link/linkmod.php...

PT-2022-16751

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue affects the /admin/news/sort mod.php endpoint, where SQL Injection is possible. Recommendations For Luocms version 2.0, update to a newer version that contains a fix for this issue, if available. As a...

PT-2022-16749

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue allows an attacker to obtain sensitive information through SQL injection statements in the "/admin/manager/admin mod.php" API endpoint. Recommendations For Luocms version 2.0, as a temporary workaround,...

PT-2022-16750

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue affects the /admin/news/news mod.php endpoint, where SQL Injection is possible. Recommendations For Luocms version 2.0, update to a newer version that contains a fix for this issue, if available. As a...

PT-2022-16748

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue allows for SQL Injection through the /admin/login.php endpoint. An attacker can exploit this to log in to the background using SQL injection statements. Recommendations For Luocms version 2.0, consider...

PT-2022-16754

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue is related to SQL Injection in the /admin/news/sort ok.php endpoint. This affects the ability to securely manage news sorting. No information is provided about the estimated number of potentially affect...

luocms 2.0 add administrator vulnerability...attached to the POST EXP-vulnerability warning-the black bar safety net

LUOCMS is a paragraph based on PHP+MYSQL article management system, easy-to-use, full DIV+CSS architecture, the whole Station HTML, good internal structure, more suitable for website optimization promotion. This author's idea is that the user can directly see the files on the session authenticati...