CVE-2024-48236: Improper Control of Generation of Code

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the write String method of the ofcms-admin\src\main\java\com\ofsoft\cms\core\uitle\FileUtils.java file...

CVE-2024-48235: Improper Control of Generation of Code

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file...

CVE-2024-48235

A remote code execution vulnerability exists in OFSoft OFCMS version 1.1.2 , a Java-based content management system developed by China Zhongtian Network (OFSoft). The root cause is an issue in the save method of the TemplateController.java file, which allows a remote attacker to execute arbitrary...

OFCMS cross-site scripting vulnerability (CNVD-2024-41671)

OFSoft OFCMS is a content management system CMS developed by China Zhongtian Network OFSoft using Java language. OFCMS version 1.1.2 cross-site scripting vulnerability, the vulnerability stems from the file /admin/system/dict/add.json?sqlid=system.dict.save parameter dictvalue on the user-supplie...

CVE-2024-9411

A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument dictvalue leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-9411

A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument dictvalue leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-9411

The CVE-2024-9411 issue affects OFCMS 1.1.2, specifically the add function at /admin/system/dict/add.json?sqlid=system.dict.save. The bug stems from manipulating the dict_value argument, enabling cross-site scripting (XSS). Remote exploitation is possible, and public exploits have been disclosed....

CVE-2024-9411 OFCMS add.json add cross site scripting

A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument dictvalue leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-9411 OFCMS add.json add cross site scripting

A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument dictvalue leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-9411: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument dictvalue leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-34256

OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function...

CVE-2024-34256

OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function...

CVE-2024-34256

OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function...

CVE-2024-34256

The OFCMS V1.1.2 content management system, developed by China Zhongtian Network Technology Company in Java, is vulnerable to SQL Injection (CWE-89). The root cause is an easy SQL injection attack originating from a new table function . This vulnerability allows for unauthorized access or manipul...

CVE-2024-34256

OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function...

PT-2024-25773 · Ofcms · Ofcms

Name of the Vulnerable Software and Affected Versions: OFCMS version 1.1.2 Description: The issue allows for SQL Injection via the new table function. Recommendations: For OFCMS version 1.1.2, update to a version that fixes this issue, however at the moment, there is no information about a newer...

CVE-2024-34256: Improper Neutralization of Special Elements used in an SQL Command

OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function...

Cross site scripting

Cross Site Scripting vulnerability in OFCMS v.1.14 allows a remote attacker to obtain sensitive information via a crafted payload to the title addition component...

CVE-2023-51807

CVE-2023-51807 is an XSS vulnerability in OFCMS v1.14. A remote attacker can obtain sensitive information by sending a crafted payload to the title addition component. CVSSv3.1 base score 5.4 (Network, Low attack complexity, Privileges Required: Low, User Interaction: Required, Scope: Changed; Co...

OFCMS Security Vulnerabilities

Zhongtian Network Technology OFCMS is a content management system CMS developed in Java language by China Zhongtian Network Technology Company. A security vulnerability exists in OFCMS version v.1.14, which stems from the presence of a cross-site scripting vulnerability that allows remote attacke...