PT-2018-13850

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.6 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is possible due to the lack of proper input validation in the mysql dbname parameter of the install/index.php file...

PT-2018-13853

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.6 Description The issue in UCMS allows escalation from the normal user level of 1 to the superuser level of 3 due to mishandling of levels in the user/editpost.php file. Recommendations For UCMS version 1.4.6, consider...

Arbitrary File Upload Vulnerability in UCMS Version 1.4.6

UCMS is a simple open source content management system, it can be very convenient to quickly develop various kinds of enterprise station, article station and station system. A file upload vulnerability exists in the \ucms\sadmin\fi.php page of UCMS version 1.4.6. An attacker can exploit the...

SQL Injection Vulnerability in the Backend of ucms v1.4.5

UCMS is a simple open source content management system. ucms v1.4.5 ucms/ucms/sadmin/cineditpost.php file SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

Arbitrary File Editing Vulnerability in UCMS Version 1.2

UCMS is a simple open source content management system. UCMS 1.2 version of the existence of arbitrary file editing vulnerability, the attacker can edit the non-existent script file, directly write a sentence Trojan horse, to obtain control of the web server...

ucms 1.4.3 SQL注入

...

UCMS v1.4.3 一处SQL注入

...

UCMS Site Settings interface the presence of stored-xss vulnerabilities

No description provided by source...

File Inclusion Vulnerability in ucms

UCMS is an open source content management system, which can be used to develop various kinds of enterprise stations, article stations and station systems. ucms file inclusion vulnerability. Due to ucms/ucms/index.php background home page in the do parameters externally controllable, attackers can...

Arbitrary File Upload Vulnerability in ucms

UCMS is an open source content management system that can be used to develop a variety of various enterprise stations, article stations and station systems. ucms background file management system file upload vulnerability. As the program does not judge the upload file, allowing attackers to explo...

Ucms <= 1.8 Backdoor Remote Command Execution Exploit

No description provided by source. html !-- Ucms 1.4, 1.7, 1.8+?all Non Public exploit by 2²hot²2 a.k.a D4m14n and shadowleet Contact: [email protected] Or [email protected] Short description: Ucms is a warez-cms coded by madmax, he selled the cms for 150 Euro for one cms, but it´s not...

ucms-backdoor.txt

Opencosmo Security http://www.opencosmo.com Ucms v. 1.8 Np exploit function sethostseite document.host.action = seite + 'index.php?&q=test&e=1'; document.all.data.innerHTML = document.host.action; /he...

Ucms &lt;= 1.8 Backdoor Remote Command Execution Exploit

Opencosmo Security http://www.opencosmo.com html !-- Ucms 1.4, 1.7, 1.8+?all Non Public exploit by 2ІhotІ2 a.k.a D4m14n and shadowleet Contact: [email protected] Or [email protected] Short description: Ucms is a warez-cms coded by madmax, he selled the cms for 150 Euro for one cms, but...

Ucms &lt;= 1.8 Backdoor Remote Command Execution Exploit

No description provided by source. html !-- Ucms 1.4, 1.7, 1.8+?all Non Public exploit by 2²hot²2 a.k.a D4m14n and shadowleet Contact: [email protected] Or [email protected] &nbs...

Ucms 1.8 - Backdoor Remote Command Execution

Ucms 1.8 - Backdoor Remote Command Execution Ucms v. 1.8 Np exploit function sethostseite document.host.action = seite + 'index.php?&q=test&e=1'; document.all.data.innerHTML = document.host...

Ucms <= 1.8 Backdoor Remote Command Execution Exploit

Exploit for unknown platform in category web applications ===================================================== Ucms Ucms v. 1.8 Np exploit function sethostseite document.host...

Ucms 1.8 - Backdoor Remote Command Execution

Ucms v. 1.8 Np exploit function sethostseite document.host.action = seite + 'index.php?&q=test&e=1'; document.all.data.innerHTML = document.host.action; body onLoad="set...