CVE-2022-24608

Luocms v2.0 is affected by Cross Site Scripting XSS in /admin/news/sortadd.php and /inc/function.php...

CVE-2022-24606

Luocms v2.0 is affected by SQL Injection in /admin/news/sortok.php...

Luocms SQL注入漏洞

Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/news/sortmod.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...

Luocms 跨站脚本漏洞

Luocms is an article management system. A cross-site scripting vulnerability exists in Luocms v2.0, which stems from a lack of data validation filtering of user-supplied data and output in /admin/news/sortadd.php and /inc/function.php. An attacker could use this vulnerability to execute JavaScrip...

PT-2022-16754

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue is related to SQL Injection in the /admin/news/sort ok.php endpoint. This affects the ability to securely manage news sorting. No information is provided about the estimated number of potentially affect...

PT-2022-16751

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue affects the /admin/news/sort mod.php endpoint, where SQL Injection is possible. Recommendations For Luocms version 2.0, update to a newer version that contains a fix for this issue, if available. As a...

PT-2022-16756

Name of the Vulnerable Software and Affected Versions Luocms version 2.0 Description The issue affects Luocms, where Cross Site Scripting XSS is present in the /admin/news/sort add.php and /inc/function.php files. Recommendations For Luocms version 2.0, as a temporary workaround, consider...