CVE-2023-48204

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...

CVE-2023-48204

PublicCMS v4.0.202302.e contains an SSRF/information disclosure issue in the api/method/getHtml component that allows remote attackers to obtain sensitive data via the appToken and Parameters parameters. Affected component: getHtml; vector: remote access (no user interaction) with low privileges;...

CVE-2023-48204

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...

PT-2023-30729 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202302.e Description: The issue allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the "api/method/getHtml" component. Recommendations: For PublicCMS version 4.0.202302....

CVE-2023-48204

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

Design/Logic Flaw

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS is affected by CVE-2023-34852 (versions prior to 4.0.202302). The issue is described as Insecure Permissions in PublicCMS

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

PT-2023-25033 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS versions prior to 4.0.202302 Description: The issue is related to Insecure Permissions. Recommendations: For versions prior to 4.0.202302, update to a version that includes the necessary security fixes to resolve the Insecure...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2020-20915

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20914

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

CVE-2020-20915

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20914

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

Sql injection

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

Sql injection

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

PublicCMS SQL注入漏洞

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS v.4.0. An attacker exploits the vulnerability to execute arbitrary code via the sql parameter of SysSiteAdminControl...