File upload vulnerability exists in UCMS (CNVD-2021-21601)

UCMS is a content management system written in PHP. There is a file upload vulnerability in the UCMS backend, which can be exploited by an attacker to upload arbitrary scripts to obtain a website webshell...

Logic flaw vulnerability in UCMS (CNVD-2021-19733)

UCMS is a simple web content management system. A logic flaw vulnerability exists in UCMS, which can be exploited by attackers to modify user passwords...

Arbitrary File Deletion Vulnerability in UCMS

UCMS is a simple web content management system. UCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to arbitrarily delete files...

Command Execution Vulnerability in UCMS System

UCMS is a simple web content management system. A command execution vulnerability exists in UCMS, which can be exploited by an attacker to gain control of the server...

UCMS suffers from a file upload vulnerability (CNVD-2021-00046)

UCMS is a content management system written in PHP. There is a file upload vulnerability in the UCMS backend, which can be exploited by an attacker to upload arbitrary scripts to obtain a website webshell...

UCMS has a logic flaw vulnerability

UCMS is a content management system written in PHP. UCMS suffers from a logic flaw vulnerability that can be exploited by an attacker to create files and folders under arbitrary paths...

SQL injection vulnerability in UCMS background ai***.php file

UCMS is a content management system written in PHP. A SQL injection vulnerability exists in the ai.php file in the background of UCMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Code Execution Vulnerability in UCMS System

UCMS is a content management system written in PHP. A code execution vulnerability exists in UCMS, which can be exploited by attackers to execute malicious code...

Command execution vulnerability exists in UCMS (CNVD-2020-71677)

UCMS is a simple open source content management system. UCMS suffers from a command execution vulnerability that can be exploited by attackers to gain server privileges...

UCMS file upload vulnerability

UCMS is a simple and efficient PHP open source website building system. UCMS 1.5.0 is vulnerable to file upload. An attacker can use this vulnerability to gain administrative privileges on the server...

CVE-2020-25537

File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission...

Unrestricted file upload

File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission...

CVE-2020-25537

File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission...

CVE-2020-25537

CVE-2020-25537 affects UCMS 1.5.0. The vulnerability is a file upload issue that, per the provided documents, can allow an attacker to obtain server management permissions. The description appears consistently across sources, but the connected documents do not provide technical details on the roo...

UCMS Project Command Injection (CVE-2020-25483)

A command Injection vulnerability exists in UCMS Project. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-25483

An arbitrary command execution vulnerability exists in the fopen function of file writes of UCMS v1.4.8, where an attacker can gain access to the server...

Command injection

An arbitrary command execution vulnerability exists in the fopen function of file writes of UCMS v1.4.8, where an attacker can gain access to the server...

CVE-2020-25483

UCMS v1.4.8 contains an arbitrary command execution vulnerability in the fopen() function used for file writes. The issue stems from UCMS’s handling of file writes, enabling an attacker to gain access to the server. Public references from NVD, Red Hat, CNVD and others corroborate the vulnerabilit...

CVE-2020-25483

An arbitrary command execution vulnerability exists in the fopen function of file writes of UCMS v1.4.8, where an attacker can gain access to the server...

Code execution vulnerability in UCMS fi***.php file

UCMS is a content management system written in PHP. A code execution vulnerability exists in the UCMS fi.php file. An attacker can exploit the vulnerability to gain server privileges...