CVE-2019-12251: Improper Neutralization of Special Elements used in an SQL Command

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

PT-2019-12718

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue allows SQL Injection via the cvalue parameter in the "index.php?do=sadmin ceditpost" endpoint. Recommendations For UCMS version 1.4.7, avoid using the cvalue parameter in the "index.php?do=sadmin...

UCMS Cross-Site Scripting Request Vulnerability

UCMS is a simple open source content management system, it can be very easy to quickly develop various kinds of enterprise station, article station and station system. The system is compatible with PHP5.2-PHP7.0, and it can be used on APACHE, NGINX, IIS, and supports two databases of MySQL SQLite...

CVE-2018-16804

An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...

CVE-2018-16804

An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...

Cross site request forgery (csrf)

An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...

CVE-2018-16804

An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...

CVE-2018-16804

CVE-2018-16804 affects UCMS 1.4.6 and describes a cross-site scripting vulnerability in the title bar, demonstrated by a do=list request. The connected documents corroborate XSS in UCMS 1.4.6 with no additional exploit details, affected components, or confirmed patches provided. No remediation st...

PT-2019-9374

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.6 Description An issue was discovered in the software, where there is a cross-site scripting XSS vulnerability in the title bar. This can be demonstrated by a request to 'do=list'. Recommendations For UCMS version 1.4.6,...

CVE-2018-16804: Improper Neutralization of Input During Web Page Generation

An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...

UCMS Cross-Site Scripting Vulnerability (CNVD-2019-01088)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'description' parameter...

UCMS cross-site scripting vulnerability (CNVD-2019-01087)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in the sadmin\cedit.php file in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Design/Logic Flaw

UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadminfileedit action...

CVE-2018-20597

UCMS 1.4.7 has XSS via the dir parameter in an index.php sadminfileedit action...

CVE-2018-20599

UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadminfileedit action...

CVE-2018-20600

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmincedit action...

CVE-2018-20601

UCMS 1.4.7 has XSS via the description parameter in an index.php listeditpost action...

CVE-2018-20598

UCMS 1.4.7 has ?do=useraddpost CSRF...

Design/Logic Flaw

UCMS 1.4.7 has XSS via the dir parameter in an index.php sadminfileedit action...

Design/Logic Flaw

UCMS 1.4.7 has XSS via the description parameter in an index.php listeditpost action...