Server side request forgery (ssrf)

Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...

CVE-2021-27693

PublicCMS is affected by a Server-side Request Forgery (SSRF) in the /publiccms/admin/ueditor endpoint when the action is catchimage, prior to version 4.0.202011.b. The vulnerability allows an attacker to access internal resources; NVD notes a critical CVSS v3.1 score (9.8, HIGHImpact on confiden...

CVE-2021-27693

Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...

PublicCMS 代码问题漏洞

PublicCMS is an open source content management system CMS written in Java by PublicCMS, China. publicCMS 4.0.202011.b previous versions exist server-side request forgery vulnerability, the vulnerability stems from the file parameter for access to the IP and domain name is not restricted. An...

PT-2022-9841 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS versions prior to 4.0.202011.b Description: The issue is related to a Server-side Request Forgery SSRF vulnerability. It affects the /publiccms/admin/ueditor endpoint when the action is catchimage. This allows for potential...

CVE-2022-29784

PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java...

CVE-2022-29784

PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java...

Information disclosure

PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java...

CVE-2022-29784

CVE-2022-29784 affects PublicCMS versions 4.0.202204.a and earlier. The vulnerability is an information leak via the component /views/directive/sys/SysConfigDataDirective.java, caused by improper handling within that directive. CVSS data in the initial record shows a MEDIUM severity with confiden...

CVE-2022-29784

PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java...

CVE-2022-29784

PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java...

PublicCMS 信息泄露漏洞

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS version V4.0.202204.a and earlier versions, which originates from an information leak in the component /views/directive/sys/SysConfigDataDirective.java...

PublicCMS Code Injection Vulnerability

PublicCMS is an open source content management system CMS written in Java by PublicCMS, a Chinese company. a code injection vulnerability exists in PublicCMS, which stems from the product's failure to secure the cmdarray parameter. An attacker can execute malicious code through this vulnerability...

CVE-2022-23389

PublicCMS v4.0 was discovered to contain a remote code execution RCE vulnerability via the cmdarray parameter...

CVE-2022-23389

PublicCMS v4.0 was discovered to contain a remote code execution RCE vulnerability via the cmdarray parameter...

CVE-2022-23389

PublicCMS v4.0 was discovered to contain a remote code execution RCE vulnerability via the cmdarray parameter...

Remote code execution

PublicCMS v4.0 was discovered to contain a remote code execution RCE vulnerability via the cmdarray parameter...

CVE-2022-23389

CVE-2022-23389 concerns PublicCMS v4.0, where a remote code execution (RCE) vulnerability arises from handling of the cmdarray parameter. The Red Hat, CNVD, CNNVD, and PT Security advisories consistently describe an RCE risk due to improper parameter handling in PublicCMS, with no explicit detail...

PublicCMS 操作系统命令注入漏洞

PublicCMS is an open source content management system CMS written in Java by PublicCMS, a Chinese company. a code injection vulnerability exists in PublicCMS, which stems from the product's failure to secure the cmdarray parameter. An attacker can execute malicious code through this vulnerability...

PT-2022-15969 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0 Description: The issue is related to a remote code execution RCE vulnerability. It can be exploited via the cmdarray parameter. Recommendations: For PublicCMS version 4.0, consider restricting access to the cmdarray...