277 matches found
CVE-2020-25483
UCMS v1.4.8 contains an arbitrary command execution vulnerability in the fopen() function used for file writes. The issue stems from UCMS’s handling of file writes, enabling an attacker to gain access to the server. Public references from NVD, Red Hat, CNVD and others corroborate the vulnerabilit...
CVE-2020-25483
An arbitrary command execution vulnerability exists in the fopen function of file writes of UCMS v1.4.8, where an attacker can gain access to the server...
PT-2020-16095
Name of the Vulnerable Software and Affected Versions UCMS version 1.4.8 Description An arbitrary command execution issue exists in the fopen function of file writes, allowing an attacker to gain access to the server. Recommendations For UCMS version 1.4.8, consider restricting access to the fope...
CVE-2020-25483: Unrestricted Upload of File with Dangerous Type
An arbitrary command execution vulnerability exists in the fopen function of file writes of UCMS v1.4.8, where an attacker can gain access to the server...
Code execution vulnerability in UCMS fi***.php file
UCMS is a content management system written in PHP. A code execution vulnerability exists in the UCMS fi.php file. An attacker can exploit the vulnerability to gain server privileges...
UCMS Access Control Error Vulnerability
UCMS is a simple and efficient PHP open source website building system. An access control error vulnerability exists in /ucms/chk.php in UCMS 1.4.8. The vulnerability originates from a network system or product that does not properly restrict access to resources from unauthorized roles, which cou...
CVE-2020-24981
An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...
CVE-2020-24981
An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...
Improper access control
An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...
CVE-2020-24981
An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...
CVE-2020-24981
CVE-2020-24981 is an Incorrect Access Control vulnerability affecting UCMS 1.4.8, with the issue located in /ucms/chk.php. The underlying problem permits information leakage through error messages when the site built with UCMS is accessed directly. Multiple connected sources (Red Hat, CNVD, NVD, ...
CVE-2020-24981: Undefined Security Weakness
An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS...
PT-2020-15876
Name of the Vulnerable Software and Affected Versions UCMS version 1.4.8 Description An issue exists where incorrect access control in the "/ucms/chk.php" endpoint results in an information leak via an error message when directly accessing a website built by UCMS. Recommendations For UCMS version...
File upload vulnerability in ucms backend (CNVD-2019-29910)
UCMS is a simple open source content management system. A file upload vulnerability exists in the ucms backend, which can be exploited by attackers to gain server privileges...
Arbitrary file upload vulnerability in ucms backend
UCMS is a simple open source content management system. There is an arbitrary file upload vulnerability in the background of ucms, which can be exploited by attackers to gain server privileges...
CVE-2019-12251
sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...
CVE-2019-12251
sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...
Sql injection
sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...
CVE-2019-12251
UCMS 1.4.7 is affected by CVE-2019-12251 via sadmin/ceditpost.php. The vulnerability is SQL Injection exploitable over the network through index.php?do=sadmin_ceditpost cvalue parameter, due to improper handling of input. CVSS information indicates high impact to confidentiality, integrity, and a...