167 matches found
CVE-2024-48237
WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php...
CVE-2024-48237
WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php...
CVE-2024-48238
WTCMS 1.0 is vulnerable to SQL Injection in the editpost method of /Admin\Controller\NavControl.class.php via the parentid parameter...
CVE-2024-48239: Improper Neutralization of Input During Web Page Generation
An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting XSS...
CVE-2024-48238: Improper Neutralization of Special Elements used in an SQL Command
WTCMS 1.0 is vulnerable to SQL Injection in the editpost method of /Admin\Controller\NavControl.class.php via the parentid parameter...
CVE-2024-48237: Incorrect Authorization
WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php...
CVE-2024-48239
An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting XSS...
CVE-2024-48237
WTCMS version 1.0 , a ThinkPHP-based content management system, is vulnerable to Incorrect Access Control within the \Common\Controller\HomebaseController.class.php file. This flaw allows for unauthorized access due to a failure in authorization checks. The vulnerability has a CRITICAL base sever...
CVE-2024-48238
WTCMS 1.0 , a ThinkPHP-based content management system, is vulnerable to SQL Injection due to the improper neutralization of special elements used in an SQL command. The flaw exists in the edit_post method of the /Admin/Controller/NavControl.class.php file, specifically triggered via the parentid...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69272)
WTCMS is a content management system CMS based on ThinkPHP. a cross-site scripting vulnerability exists in the link address field under the link module of the WTCMS backend. No details of the vulnerability are currently available...
WTCMS Cross-site Request Forgery Vulnerability (CNVD-2021-69267)
WTCMS is a content management system CMS based on ThinkPHP. index.php?g=admin in WTCMS...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69268)
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69271)
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the link fields under the menu management module of the WTCMS backend. No detailed vulnerability details are provided at this time...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69269)
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the WTCMS page management backend. An attacker can exploit the vulnerability to obtain a cookie by entering a specially crafted payload into the search box...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69270)
WTCMS is a content management system CMS based on ThinkPHP. wtcms has a cross-site scripting vulnerability in the article source field under the article management module. No detailed vulnerability details are currently available...
CVE-2020-20343
WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...
CVE-2020-20349
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...
CVE-2020-20344
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...