UCMS 安全漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS v1.6.0, which stems from an authentication bypass vulnerability that contains an exploit via cookie poisoning...

CVE-2020-25483

An arbitrary command execution vulnerability exists in the fopen function of file writes of UCMS v1.4.8, where an attacker can gain access to the server...

CVE-2018-17037

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3...