Lucene search
+L

37689 matches found

CNNVD
CNNVD
added 2025/12/29 12:00 a.m.7 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which originates from a misuse of the function redirectNoPower in the file src/main/java/com/sohu/cache/web/controller/WebResourceController.java...

5.4CVSS4.7AI score0.00233EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.9 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function doAppAuditList in the file...

5.4CVSS4.8AI score0.00233EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.11 views

Advaya Softech GEMS ERP Portal 代码注入漏洞

Advaya Softech GEMS ERP Portal is an enterprise resource planning ERP portal system from Advaya Softech India that provides enterprise-level business process management, financial management, and supply chain integration capabilities. A code injection vulnerability exists in Advaya Softech GEMS E...

6.1CVSS4.8AI score0.00359EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.12 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function taskQueueList in the file src/main/java/com/sohu/cache/web/controller/TaskController.java...

4.8CVSS4.1AI score0.00242EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/28 6:15 p.m.10 views

CVE-2025-15148

A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetempaction in the library /lib/admin/templateadmin.php of the component Backend Template Management Page. Executing a manipulation of the argument content/tempdata can lead to code injection. The attack may be launched...

7.2CVSS5.5AI score0.0047EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/28 6:02 p.m.7 views

CVE-2025-15148 CmsEasy Backend Template Management template_admin.php savetemp_action code injection

A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetempaction in the library /lib/admin/templateadmin.php of the component Backend Template Management Page. Executing a manipulation of the argument content/tempdata can lead to code injection. The attack may be launched...

5.8CVSS4.8AI score0.0047EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/28 6:02 p.m.37 views

CVE-2025-15148 CmsEasy Backend Template Management template_admin.php savetemp_action code injection

A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetempaction in the library /lib/admin/templateadmin.php of the component Backend Template Management Page. Executing a manipulation of the argument content/tempdata can lead to code injection. The attack may be launched...

5.8CVSS0.0047EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2025/12/28 6:02 p.m.8 views

CVE-2025-15148

A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetempaction in the library /lib/admin/templateadmin.php of the component Backend Template Management Page. Executing a manipulation of the argument content/tempdata can lead to code injection. The attack may be launched...

7.2CVSS5.2AI score0.0047EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/12/28 6:02 p.m.9 views

EUVD-2025-205522

A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetempaction in the library /lib/admin/templateadmin.php of the component Backend Template Management Page. Executing manipulation of the argument content/tempdata can lead to code injection. The attack may be launched...

5.8CVSS5AI score0.0047EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/28 6:02 p.m.24 views

CVE-2025-15148

CmsEasy up to 7.7.7 is affected by a code-injection flaw in the savetemp_action function of /lib/admin/template_admin.php in the Backend Template Management Page. Manipulating the content/tempdata argument can enable remote code execution, and an exploit has been published. The vendor has not res...

7.2CVSS4.8AI score0.0047EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2025/12/28 12:30 p.m.8 views

EUVD-2025-205503

A vulnerability has been found in shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. This issue affects the function addPost of the file Application/Admin/Controller/FileManageController.class.php of the component Administrative Panel. The manipulation leads to code injection. The attac...

5.8CVSS6.5AI score0.00277EPSS
SaveExploits0References5
NVD
NVD
added 2025/12/28 10:15 a.m.15 views

CVE-2025-15130

A vulnerability has been found in shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. This issue affects the function addPost of the file Application/Admin/Controller/FileManageController.class.php of the component Administrative Panel. The manipulation leads to code injection. The attac...

5.8CVSS0.00277EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/28 9:32 a.m.18 views

CVE-2025-15130

The CVE-2025-15130 entry affects shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. The vulnerability resides in the Administrative Panel’s Function addPost in Application/Admin/Controller/FileManageController.class.php, enabling remote code injection. Multiple sources corroborate the i...

5.8CVSS6.7AI score0.00277EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/28 9:32 a.m.43 views

CVE-2025-15130 shanyu SyCms Administrative Panel FileManageController.class.php addPost code injection

A vulnerability has been found in shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. This issue affects the function addPost of the file Application/Admin/Controller/FileManageController.class.php of the component Administrative Panel. The manipulation leads to code injection. The attac...

5.8CVSS0.00277EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/28 9:32 a.m.7 views

CVE-2025-15130 shanyu SyCms Administrative Panel FileManageController.class.php addPost code injection

A vulnerability has been found in shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. This issue affects the function addPost of the file Application/Admin/Controller/FileManageController.class.php of the component Administrative Panel. The manipulation leads to code injection. The attac...

5.8CVSS4.8AI score0.00277EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/28 9:30 a.m.12 views

EUVD-2025-205502

A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/LocalUploader.php of the component File Upload Handler. Executing manipulation of the argument File can lead to code injection. The attack can be execute...

6.5CVSS6.5AI score0.00321EPSS
SaveExploits0References5
NVD
NVD
added 2025/12/28 9:15 a.m.11 views

CVE-2025-15129

A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/LocalUploader.php of the component File Upload Handler. Executing manipulation of the argument File can lead to code injection. The attack can be execute...

6.5CVSS0.00321EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/28 9:02 a.m.23 views

CVE-2025-15129

ChenJinchuang Lin-CMS-TP5

6.5CVSS6.7AI score0.00321EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/28 9:02 a.m.10 views

CVE-2025-15129 ChenJinchuang Lin-CMS-TP5 File Upload LocalUploader.php upload code injection

A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/LocalUploader.php of the component File Upload Handler. Executing manipulation of the argument File can lead to code injection. The attack can be execute...

5.3CVSS6.3AI score
SaveExploits0References6
Cvelist
Cvelist
added 2025/12/28 9:02 a.m.37 views

CVE-2025-15129 ChenJinchuang Lin-CMS-TP5 File Upload LocalUploader.php upload code injection

A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/LocalUploader.php of the component File Upload Handler. Executing manipulation of the argument File can lead to code injection. The attack can be execute...

6.5CVSS0.00321EPSS
SaveExploits0References4
Rows per page
Query Builder