EUVD-2023-24000

Malicious code in bioql PyPI...

PT-2023-2274 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OTCMS version 6.0.1 Description: A critical vulnerability was found in OTCMS, related to the absence of restrictions on file uploads. This issue affects an unknown functionality of the file sysCheckFile.php, where the mudi parameter is set to...

OTCMS code-related vulnerabilities

OTCMS Nettie CMS is an article-based web content management system CMS. A security vulnerability exists in OTCMS version 6.0.1, which originates from an unknown function in the file sysCheckFile.php?mudi=sql, resulting in unrestricted uploads...

PT-2019-15110

Name of the Vulnerable Software and Affected Versions OTCMS version 3.85 Description The issue allows for arbitrary PHP code execution. This is due to insufficient blocking of certain SQL manipulations in the admin/sysCheckFile deal.php file, specifically not blocking the "into//outfile"...