EUVD-2021-31145

Malicious code in bioql PyPI...

EUVD-2021-28741

Malicious code in bioql PyPI...

CVE-2021-44302

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...

CVE-2021-44302

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...

CVE-2021-44302

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...

Sql injection

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...

CVE-2021-44302

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...

CVE-2021-44302

CVE-2021-44302 affects BaiCloud-cms v2.5.7 and is due to multiple SQL injection vulnerabilities exposed through the tongji and baidu_map parameters in /user/ztconfig.php. The NVD records CVSS 3.1 base score 8.8 (HIGH) with network access, low attack complexity, and privileges required at LOW, ind...

PT-2022-12038

Name of the Vulnerable Software and Affected Versions BaiCloud-cms version 2.5.7 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the tongji and baidu map parameters in the "/user/ztconfig.php" API endpoint. Recommendations For...

CVE-2021-44302: Improper Neutralization of Special Elements used in an SQL Command

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...

CVE-2021-41729

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

Arbitrary file deletion

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

CVE-2021-41729

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

CVE-2021-41729

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

CVE-2021-41729

CVE-2021-41729 affects BaiCloud-cms v2.5.7, with an arbitrary file deletion vulnerability exploitable via /user/ppsave.php. Connected sources provide the product, vulnerable component (server-side file handling), and impact (arbitrary file deletion). CVSS-3.1 indicates a CRITICAL base score (9.1)...

CVE-2021-41729: Missing Authorization

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

Baicloud Cms 安全漏洞

Baicloud Cms is a Chinese lightweight open source content management system Cms based on Php and MySQL, running on Linux, Windows and other platforms. A security vulnerability exists in Baicloud Cms v2.5.7 that allows an attacker to delete arbitrary files on the server via /user/ppsave.php...

PT-2021-23385

Name of the Vulnerable Software and Affected Versions BaiCloud-cms version 2.5.7 Description The issue allows an attacker to delete arbitrary files on the server through the "/user/ppsave.php" API endpoint. This is an arbitrary file deletion vulnerability. Recommendations For BaiCloud-cms version...