CVE-2022-28440

The CVE-2022-28440 entry describes an arbitrary file upload vulnerability in UCMS v1.6 that allows an attacker to execute arbitrary code via a crafted PHP file. Affected component: UCMS web CMS version 1.6; vulnerability type: arbitrary file upload leading to remote code execution. According to t...

CVE-2022-28443

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability...

CVE-2022-28444

UCMS v1.6 contains an arbitrary file read vulnerability (CVE-2022-28444) that could allow attackers to directly obtain the contents of website files, exposing confidential documents. This is described across multiple sources (Red Hat, CNVD/CNNVD, CVE listing) but the provided documents do not inc...

CVE-2022-28444

UCMS v1.6 was discovered to contain an arbitrary file read vulnerability...

CVE-2022-28443

Technical details on CVE-2022-28443 are not publicly available in the provided documents. The UCMS v1.6 arbitrary file deletion vulnerability is described at high level; monitor for updates and any vendor advisories for affected versions and mitigations.

UCMS 代码问题漏洞

UCMS is a simple and efficient PHP open source CMS website building system. UCMS v1.6 contains an arbitrary file upload vulnerability that can be exploited by attackers to execute arbitrary code via carefully crafted PHP files...

CVE-2020-20781

A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...

CVE-2020-20781

A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...

Cross site scripting

A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...

CVE-2020-20781

A stored cross-site scripting XSS vulnerability in /ucms/index.php?do=listedit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields...

CVE-2020-20781

UCMS 1.4.7 has a stored XSS in /ucms/index.php?do=list_edit that allows arbitrary HTML/script via crafted text in title, keywords, description, or content fields. Connected documents provide no exploitation details or remediation patches/versions; no fix/version info is in the supplied materials....

UCMS Information Disclosure Vulnerability

UCMS is a content management system written in PHP. UCMS 1.5.0 contains a security vulnerability that stems from an error message returned by the adminchannelscache function in top.php that contains a physical path leak. No details of the vulnerability are currently available...

CVE-2021-25809

UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache function in top.php...

Code injection

UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache function in top.php...

CVE-2021-25809

CVE-2021-25809 affects UCMS 1.5.0 (PHP-based CMS). The vulnerability is an information disclosure: a physical path leakage exposed via the error message produced by adminchannelscache() in top.php. Impact is partial confidentiality breach with no documented exploitation details in the provided so...

CVE-2021-25809

UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache function in top.php...

UCMS has a vertical override vulnerability

UCMS is a simple open source content management system. UCMS suffers from a vertical override vulnerability that can be exploited by attackers to obtain sensitive information...

UCMS suffers from a file upload vulnerability (CNVD-2021-33188)

UCMS is a simple web content management system. A file upload vulnerability exists in UCMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in UCMS Backend

UCMS is a simple open source content management system. A file upload vulnerability exists in the UCMS backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

File upload vulnerability exists in UCMS (CNVD-2021-21601)

UCMS is a content management system written in PHP. There is a file upload vulnerability in the UCMS backend, which can be exploited by an attacker to upload arbitrary scripts to obtain a website webshell...