CVE-2022-38527

UCMS v1.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the Import function under the Site Management page...

CVE-2022-38527

CVE-2022-38527 : UCMS v1.6.0 contains a cross-site scripting (XSS) vulnerability via the Import function in the Site Management page. The provided sources consistently identify UCMS 1.6.0 and the Import function as the vulnerable vector, with the root cause described as an XSS flaw and no public ...

UCMS 跨站脚本漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS v1.6.0, which originates from the fact that an attacker can implement cross-site scripting via the Import function of its web management interface...

CVE-2022-38527: Improper Neutralization of Input During Web Page Generation

UCMS v1.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the Import function under the Site Management page...

CVE-2022-38297

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

CVE-2022-38297

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

Authentication flaw

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

CVE-2022-38297

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

CVE-2022-38297

CVE-2022-38297 affects UCMS v1.6.0 with an authentication bypass that can be exploited via cookie poisoning. The vulnerability has a CVSS v3.1 base score of 9.8 (NETWORK, LOW attack complexity, no privileges required, user interaction not needed; impacts Confidentiality, Integrity, Availability)....

PT-2022-24347 · Ucms · Ucms

Name of the Vulnerable Software and Affected Versions: UCMS version 1.6.0 Description: The issue is an authentication bypass vulnerability that can be exploited through cookie poisoning. Recommendations: For UCMS version 1.6.0, update to a version that contains a fix for this issue, as the curren...

CVE-2022-38297: Reliance on Cookies without Validation and Integrity Checking

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

Design/Logic Flaw

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

CVE-2022-35426

CVE-2022-35426 affects UCMS 1.6. The vulnerability is an arbitrary file upload in the ucms/sadmin/file.php handler, enabling an attacker to upload arbitrary files and potentially impact confidentiality, integrity, and availability. Root cause indicated by multiple sources is a flaw in the file up...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

CVE-2022-35426: Unrestricted Upload of File with Dangerous Type

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

UCMS arbitrary file deletion vulnerability

UCMS is a simple and efficient PHP open source CMS building system. UCMS v1.6 has arbitrary file deletion vulnerability, there is no detailed vulnerability details provided...

UCMS arbitrary file upload vulnerability

UCMS is a simple and efficient PHP open source CMS website building system. UCMS v1.6 contains an arbitrary file upload vulnerability that can be exploited by attackers to execute arbitrary code via carefully crafted PHP files...