ftcms 跨站请求伪造漏洞

ftcms is a content management system from ftcms, Inc. A security vulnerability exists in ftcms version 2.1, which stems from a vulnerability in its News.php page that allows an attacker to spoof a link and trick others into clicking on a malicious link or accessing a page that contains attack cod...

CVE-2022-37730: Cross-Site Request Forgery (CSRF)

In ftcms 2.1, there is a Cross Site Request Forgery CSRF vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server corresponding to the identity authentication...

ftcms 跨站脚本漏洞

ftcms is a content management system from ftcms, Inc. A security vulnerability exists in ftcms version 2.1, which stems from its poster.PHP page that allows an attacker to insert malicious JavaScript code into a web page, resulting in the triggering of malicious code when a user/administrator...

CVE-2022-37731: Improper Neutralization of Input During Web Page Generation

ftcms 2.1 poster.PHP has a XSS vulnerability. The attacker inserts malicious JavaScript code into the web page, causing the user / administrator to trigger malicious code when accessing...

PT-2022-24053 · Ftcms · Ftcms

Name of the Vulnerable Software and Affected Versions: ftcms version 2.1 Description: The issue allows an attacker to insert malicious JavaScript code into the web page, causing the user or administrator to trigger malicious code when accessing. This is a result of a XSS vulnerability in the...

ftcms arbitrary file writing vulnerability

ftcms is a content management system from ftcms. ftcms version 2.1 and previous versions have an arbitrary file write vulnerability, which originates from the lack of valid file checksum in admin/controllers/tp.php and can be exploited by attackers to cause arbitrary file writes...

CVE-2022-30063

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

CVE-2022-30063

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

CVE-2022-30063

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

Code injection

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

CVE-2022-30061

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

CVE-2022-30060

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

CVE-2022-30060

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

CVE-2022-30061

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

CVE-2022-30062

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

CVE-2022-30060

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

CVE-2022-30062

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

CVE-2022-30062

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

CVE-2022-30061

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

Code injection

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...