CVE-2018-17036

An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo call into /inc/config.php...

Design/Logic Flaw

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3...

Sql injection

UCMS 1.4.6 has SQL injection during installation via the install/index.php mysqldbname parameter...

CVE-2018-17037

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3...

CVE-2018-17037

UCMS 1.4.6 contains a privilege-escalation vulnerability in user/editpost.php that lets an attacker move from user level 1 to superuser level 3. The root cause is described as the application mishandling privilege levels, enabling elevation without exploit specifics. Affected software: UCMS 1.4.6...

CVE-2018-17034

UCMS 1.4.6 contains a Cross-Site Scripting (XSS) vulnerability controllable via the mysql_dbname parameter in install/index.php. Multiple connected sources (NVD entry CVE-2018-17034 and CNVD/CVE listings) confirm an XSS flaw capable of injecting arbitrary scripts/HTML in affected users’ browsers....

CVE-2018-17036

An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo call into /inc/config.php...

CVE-2018-17034

UCMS 1.4.6 has XSS via the install/index.php mysqldbname parameter...

CVE-2018-17035

UCMS 1.4.6 has SQL injection during installation via the install/index.php mysqldbname parameter...

CVE-2018-17035

The vulnerability CVE-2018-17035 affects UCMS 1.4.6, where an SQL injection can occur during installation via the install/index.php mysql_dbname parameter. Affected component is UCMS (PHP-based CMS); root cause is unsafely handled mysql_dbname input during setup, enabling potential SQL command ex...

CVE-2018-17036

UCMS 1.4.6 and 1.6 have a PHP code injection vulnerability in the installer. The flaw occurs in the install/index.php flow via the systemdomain parameter, enabling injection and execution of PHP code (demonstrated by injecting a phpinfo() call into /inc/config.php). Root cause, as described in mu...

CVE-2018-17036: Improper Control of Generation of Code

An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo call into /inc/config.php...

UCMS Elevation of Privilege Vulnerability

UCMS is a content management system written in PHP. A security vulnerability exists in the user/editpost.php file in UCMS version 1.4.6. An attacker can exploit this vulnerability to elevate an ordinary user's level 1 privileges to a super user's level 3 privileges...

UCMS SQL Injection Vulnerability

UCMS is a content management system written in PHP. A SQL injection vulnerability exists in the install/index.php file in UCMS version 1.4.6. A remote attacker can exploit this vulnerability to execute SQL commands with the help of the 'mysqldbname' parameter...

UCMS Cross-Site Scripting Vulnerability (CNVD-2018-19624)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in the install/index.php page in UCMS version 1.4.6. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'mysqldbname' parameter...

CVE-2018-17035: Improper Neutralization of Special Elements used in an SQL Command

UCMS 1.4.6 has SQL injection during installation via the install/index.php mysqldbname parameter...

CVE-2018-17037: Incorrect Permission Assignment for Critical Resource

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3...

CVE-2018-17034: Improper Neutralization of Input During Web Page Generation

UCMS 1.4.6 has XSS via the install/index.php mysqldbname parameter...

PT-2018-13852

Name of the Vulnerable Software and Affected Versions UCMS versions 1.4.6 through 1.6 Description An issue allows PHP code injection during installation via the systemdomain parameter to "install/index.php", as demonstrated by injecting a phpinfo call into /inc/config.php. Recommendations For UCM...

PT-2018-13851

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.6 Description The issue is related to SQL injection that occurs during the installation process. Specifically, the mysql dbname parameter in the install/index.php endpoint is vulnerable. Recommendations For version 1.4.6, avoi...