277 matches found
File Upload Vulnerability in UCMS Backend
UCMS is a simple open source content management system. A file upload vulnerability exists in the UCMS backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...
File upload vulnerability exists in UCMS (CNVD-2021-21601)
UCMS is a content management system written in PHP. There is a file upload vulnerability in the UCMS backend, which can be exploited by an attacker to upload arbitrary scripts to obtain a website webshell...
Logic flaw vulnerability in UCMS (CNVD-2021-19733)
UCMS is a simple web content management system. A logic flaw vulnerability exists in UCMS, which can be exploited by attackers to modify user passwords...
Arbitrary File Deletion Vulnerability in UCMS
UCMS is a simple web content management system. UCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to arbitrarily delete files...
Command Execution Vulnerability in UCMS System
UCMS is a simple web content management system. A command execution vulnerability exists in UCMS, which can be exploited by an attacker to gain control of the server...
UCMS suffers from a file upload vulnerability (CNVD-2021-00046)
UCMS is a content management system written in PHP. There is a file upload vulnerability in the UCMS backend, which can be exploited by an attacker to upload arbitrary scripts to obtain a website webshell...
UCMS has a logic flaw vulnerability
UCMS is a content management system written in PHP. UCMS suffers from a logic flaw vulnerability that can be exploited by an attacker to create files and folders under arbitrary paths...
SQL injection vulnerability in UCMS background ai***.php file
UCMS is a content management system written in PHP. A SQL injection vulnerability exists in the ai.php file in the background of UCMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...
Code Execution Vulnerability in UCMS System
UCMS is a content management system written in PHP. A code execution vulnerability exists in UCMS, which can be exploited by attackers to execute malicious code...
Command execution vulnerability exists in UCMS (CNVD-2020-71677)
UCMS is a simple open source content management system. UCMS suffers from a command execution vulnerability that can be exploited by attackers to gain server privileges...
UCMS file upload vulnerability
UCMS is a simple and efficient PHP open source website building system. UCMS 1.5.0 is vulnerable to file upload. An attacker can use this vulnerability to gain administrative privileges on the server...
CVE-2020-25537
File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission...
Unrestricted file upload
File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission...
CVE-2020-25537
File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission...
CVE-2020-25537
CVE-2020-25537 affects UCMS 1.5.0. The vulnerability is a file upload issue that, per the provided documents, can allow an attacker to obtain server management permissions. The description appears consistently across sources, but the connected documents do not provide technical details on the roo...
PT-2020-16106
Name of the Vulnerable Software and Affected Versions UCMS version 1.5.0 Description A file upload issue exists, allowing an attacker to exploit it and gain server management permission. Recommendations For UCMS version 1.5.0, update to a version that fixes this issue to prevent exploitation...
CVE-2020-25537: Unrestricted Upload of File with Dangerous Type
File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission...
UCMS Project Command Injection (CVE-2020-25483)
A command Injection vulnerability exists in UCMS Project. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...