542 matches found
PT-2024-28908 · Publiccms · Publiccms
Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202302.e Description: The issue is related to a Server-Side Request Forgery SSRF that can be exploited via the component /admin/ueditor?action=catchimage. This allows an attacker to forge requests from the server...
PT-2024-28914 · Publiccms · Publiccms
Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202302.e Description: The issue is related to an arbitrary file upload vulnerability in the /admin/cmsTemplate/savePlace component. This allows attackers to execute arbitrary code by uploading a crafted file...
PT-2024-28910 · Publiccms · Publiccms
Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202302.e Description: The issue concerns an arbitrary file upload vulnerability in the /admin/cmsWebFile/doUpload component. This vulnerability allows attackers to execute arbitrary code by uploading a crafted file...
CVE-2024-40544
PublicCMS v4.0.202302.e is affected by a Server-Side Request Forgery (SSRF) issue via the /admin/#maintenance_sysTask/edit endpoint. The CVE-2024-40544 entry and several connected sources confirm the vulnerability details and an overall high impact (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)...
CVE-2024-40544
PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery SSRF via the component /admin/maintenancesysTask/edit...
CVE-2024-40544
PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery SSRF via the component /admin/maintenancesysTask/edit...
CVE-2024-40552: Improper Control of Generation of Code
PublicCMS v4.0.202302.e was discovered to contain a remote commande execution RCE vulnerability via the cmdarray parameter at /site/ScriptComponent.java...
CVE-2024-40543: Server-Side Request Forgery (SSRF)
PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery SSRF via the component /admin/ueditor?action=catchimage...
CVE-2024-40552
CVE-2024-40552 affects PublicCMS v4.0.202302.e and is a remote command execution vulnerability exploitable via the cmdarray parameter in /site/ScriptComponent.java. The connected documents confirm the affected product/version and the root cause is a vulnerable handling of the cmdarray input leadi...
CVE-2024-40549
An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40545: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40546
An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40547
PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace...
PublicCMS Security Vulnerabilities
PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS version v4.0.202302.e, which originates from a Contains Arbitrary File Content Replacement vulnerability...
CVE-2024-40547
PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace...
PT-2024-28917
Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.202302.e Description A remote command execution issue was discovered, allowing attackers to execute commands via the cmdarray parameter at the /site/ScriptComponent.java endpoint. Recommendations For PublicCMS version...
CVE-2024-40552
PublicCMS v4.0.202302.e was discovered to contain a remote commande execution RCE vulnerability via the cmdarray parameter at /site/ScriptComponent.java...
CVE-2024-40549
An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...