Design/Logic Flaw

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-1303 UCMS System File Management Module fileedit.php unrestricted upload

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-1303

CVE-2023-1303 affects UCMS 1.6, specifically the System File Management Module and the sadmin/fileedit.php file. The root cause is manipulation of the file argument in that module, leading to an unrestricted upload. The issue can be exploited remotely according to multiple sources, with varying C...

CVE-2022-42234

There is a file inclusion vulnerability in the template management module in UCMS 1.6...

CVE-2022-42234

There is a file inclusion vulnerability in the template management module in UCMS 1.6...

Arbitrary file deletion

There is a file inclusion vulnerability in the template management module in UCMS 1.6...

CVE-2022-42234

Summary: CVE-2022-42234 is a file inclusion vulnerability in the template management module of UCMS 1.6. The Red Hat, NVD, and other feeds confirm a vulnerability in UCMS 1.6, with CVSSv3.1 impacts: CVSS 3.1 base score 8.8 (HIGH) across confidentiality, integrity, and availability, confirmed with...

CVE-2022-42234

There is a file inclusion vulnerability in the template management module in UCMS 1.6...

CVE-2022-42234

There is a file inclusion vulnerability in the template management module in UCMS 1.6...

PT-2022-26322 · Ucms · Ucms

Name of the Vulnerable Software and Affected Versions: UCMS version 1.6 Description: The issue is related to a file inclusion vulnerability in the template management module. Recommendations: For UCMS version 1.6, update to a version that includes a fix for the file inclusion vulnerability in the...

CVE-2022-38527

UCMS v1.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the Import function under the Site Management page...

Cross site scripting

UCMS v1.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the Import function under the Site Management page...

CVE-2022-38527

CVE-2022-38527 : UCMS v1.6.0 contains a cross-site scripting (XSS) vulnerability via the Import function in the Site Management page. The provided sources consistently identify UCMS 1.6.0 and the Import function as the vulnerable vector, with the root cause described as an XSS flaw and no public ...

CVE-2022-38527

UCMS v1.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the Import function under the Site Management page...

CVE-2022-38527

UCMS v1.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the Import function under the Site Management page...

UCMS 跨站脚本漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS v1.6.0, which originates from the fact that an attacker can implement cross-site scripting via the Import function of its web management interface...

CVE-2022-38297

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

CVE-2022-38297

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

Authentication flaw

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

CVE-2022-38297

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...