CVE-2022-24608

Luocms v2.0 is affected by Cross Site Scripting XSS in /admin/news/sortadd.php and /inc/function.php...

CVE-2022-24609

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/templatemanage.php, an attacker can write an arbitrary shell file...

CVE-2022-24609

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/templatemanage.php, an attacker can write an arbitrary shell file...

CVE-2022-24607

Luocms v2.0 is affected by SQL Injection in /admin/news/newsok.php...

CVE-2022-24606

Luocms v2.0 is affected by SQL Injection in /admin/news/sortok.php...

CVE-2022-24605

Luocms v2.0 is affected by SQL Injection in /admin/link/linkok.php...

CVE-2022-24602

Luocms v2.0 is affected by SQL Injection in /admin/news/newsmod.php...

CVE-2022-24604

Luocms v2.0 is affected by SQL Injection in /admin/link/linkmod.php...

CVE-2022-24603

Luocms v2.0 is affected by SQL Injection in /admin/news/sortmod.php...

CVE-2022-24601

Luocms v2.0 is affected by SQL Injection in /admin/manager/adminmod.php. An attacker can obtain sensitive information through SQL injection statements...

CVE-2022-24600

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements...

Sql injection

Luocms v2.0 is affected by SQL Injection in /admin/manager/adminmod.php. An attacker can obtain sensitive information through SQL injection statements...

Sql injection

Luocms v2.0 is affected by SQL Injection in /admin/link/linkmod.php...

Sql injection

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements...

Sql injection

Luocms v2.0 is affected by SQL Injection in /admin/news/newsok.php...

Sql injection

Luocms v2.0 is affected by SQL Injection in /admin/link/linkok.php...

Sql injection

Luocms v2.0 is affected by SQL Injection in /admin/news/sortok.php...

Cross site scripting

Luocms v2.0 is affected by Cross Site Scripting XSS in /admin/news/sortadd.php and /inc/function.php...

Improper access control

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/templatemanage.php, an attacker can write an arbitrary shell file...

Sql injection

Luocms v2.0 is affected by SQL Injection in /admin/news/newsmod.php...