UCMS Access Control Error Vulnerability

UCMS is a simple and efficient PHP open source website building system. An access control error vulnerability exists in /ucms/chk.php in UCMS 1.4.8. The vulnerability originates from a network system or product that does not properly restrict access to resources from unauthorized roles, which cou...

CVE-2020-24981

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...

CVE-2020-24981

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...

Improper access control

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...

CVE-2020-24981

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...

CVE-2020-24981

CVE-2020-24981 is an Incorrect Access Control vulnerability affecting UCMS 1.4.8, with the issue located in /ucms/chk.php. The underlying problem permits information leakage through error messages when the site built with UCMS is accessed directly. Multiple connected sources (Red Hat, CNVD, NVD, ...

File upload vulnerability in ucms backend (CNVD-2019-29910)

UCMS is a simple open source content management system. A file upload vulnerability exists in the ucms backend, which can be exploited by attackers to gain server privileges...

Arbitrary file upload vulnerability in ucms backend

UCMS is a simple open source content management system. There is an arbitrary file upload vulnerability in the background of ucms, which can be exploited by attackers to gain server privileges...

CVE-2019-12251

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

CVE-2019-12251

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

Sql injection

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

CVE-2019-12251

UCMS 1.4.7 is affected by CVE-2019-12251 via sadmin/ceditpost.php. The vulnerability is SQL Injection exploitable over the network through index.php?do=sadmin_ceditpost cvalue parameter, due to improper handling of input. CVSS information indicates high impact to confidentiality, integrity, and a...

CVE-2019-12251

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

UCMS Cross-Site Scripting Request Vulnerability

UCMS is a simple open source content management system, it can be very easy to quickly develop various kinds of enterprise station, article station and station system. The system is compatible with PHP5.2-PHP7.0, and it can be used on APACHE, NGINX, IIS, and supports two databases of MySQL SQLite...

CVE-2018-16804

An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...

CVE-2018-16804

An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...

Cross site request forgery (csrf)

An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...

CVE-2018-16804

An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...

CVE-2018-16804

CVE-2018-16804 affects UCMS 1.4.6 and describes a cross-site scripting vulnerability in the title bar, demonstrated by a do=list request. The connected documents corroborate XSS in UCMS 1.4.6 with no additional exploit details, affected components, or confirmed patches provided. No remediation st...

UCMS Cross-Site Scripting Vulnerability (CNVD-2019-01088)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'description' parameter...