EUVD-2022-38314

Malicious code in bioql PyPI...

CVE-2023-1303

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

Design/Logic Flaw

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-1303

CVE-2023-1303 affects UCMS 1.6, specifically the System File Management Module and the sadmin/fileedit.php file. The root cause is manipulation of the file argument in that module, leading to an unrestricted upload. The issue can be exploited remotely according to multiple sources, with varying C...

CVE-2022-42234

There is a file inclusion vulnerability in the template management module in UCMS 1.6...

Arbitrary file deletion

There is a file inclusion vulnerability in the template management module in UCMS 1.6...

CVE-2022-42234

There is a file inclusion vulnerability in the template management module in UCMS 1.6...

CVE-2022-42234

There is a file inclusion vulnerability in the template management module in UCMS 1.6...

CVE-2022-42234

Summary: CVE-2022-42234 is a file inclusion vulnerability in the template management module of UCMS 1.6. The Red Hat, NVD, and other feeds confirm a vulnerability in UCMS 1.6, with CVSSv3.1 impacts: CVSS 3.1 base score 8.8 (HIGH) across confidentiality, integrity, and availability, confirmed with...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

Design/Logic Flaw

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file...

CVE-2018-17036

An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo call into /inc/config.php...

CVE-2018-17036

An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo call into /inc/config.php...