EUVD-2018-9075

Malware in sbrugna...

EUVD-2018-13151

Malware in sbrugna...

CVE-2019-12251

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

CVE-2018-20600

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmincedit action...

UCMS 代码问题漏洞

UCMS is a content management system written in PHP. A code issue vulnerability exists in UCMS version 1.6, which stems from an unknown security issue in the file sadmin/fileedit.php in the component System File Management Module, which could lead to unrestricted uploads via the parameter id...

CVE-2023-1303: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

Design/Logic Flaw

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

PT-2022-22819 · Ucms · Ucms

Name of the Vulnerable Software and Affected Versions: UCMS version 1.6 Description: The issue allows for arbitrary file upload via the ucms/sadmin/file PHP file. Recommendations: For version 1.6, consider restricting access to the ucms/sadmin/file PHP file to minimize the risk of exploitation...

CVE-2022-35426: Unrestricted Upload of File with Dangerous Type

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

CVE-2019-12251

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

CVE-2019-12251

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

CVE-2019-12251

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

PT-2019-12718

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue allows SQL Injection via the cvalue parameter in the "index.php?do=sadmin ceditpost" endpoint. Recommendations For UCMS version 1.4.7, avoid using the cvalue parameter in the "index.php?do=sadmin...

CVE-2019-12251: Improper Neutralization of Special Elements used in an SQL Command

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadminceditpost cvalue parameter...

UCMS cross-site scripting vulnerability (CNVD-2019-01087)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in the sadmin\cedit.php file in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2018-20600

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmincedit action...

PT-2018-15461

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved by exploiting the dir parameter in the "index.php" sadmin fileedit action, allowing for malicious script...