CVE-2018-17035

The vulnerability CVE-2018-17035 affects UCMS 1.4.6, where an SQL injection can occur during installation via the install/index.php mysql_dbname parameter. Affected component is UCMS (PHP-based CMS); root cause is unsafely handled mysql_dbname input during setup, enabling potential SQL command ex...

CVE-2018-17037

UCMS 1.4.6 contains a privilege-escalation vulnerability in user/editpost.php that lets an attacker move from user level 1 to superuser level 3. The root cause is described as the application mishandling privilege levels, enabling elevation without exploit specifics. Affected software: UCMS 1.4.6...

CVE-2018-17034

UCMS 1.4.6 contains a Cross-Site Scripting (XSS) vulnerability controllable via the mysql_dbname parameter in install/index.php. Multiple connected sources (NVD entry CVE-2018-17034 and CNVD/CVE listings) confirm an XSS flaw capable of injecting arbitrary scripts/HTML in affected users’ browsers....

CVE-2018-17036

UCMS 1.4.6 and 1.6 have a PHP code injection vulnerability in the installer. The flaw occurs in the install/index.php flow via the systemdomain parameter, enabling injection and execution of PHP code (demonstrated by injecting a phpinfo() call into /inc/config.php). Root cause, as described in mu...

CVE-2018-17037

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3...

CVE-2018-17034

UCMS 1.4.6 has XSS via the install/index.php mysqldbname parameter...

UCMS SQL Injection Vulnerability

UCMS is a content management system written in PHP. A SQL injection vulnerability exists in the install/index.php file in UCMS version 1.4.6. A remote attacker can exploit this vulnerability to execute SQL commands with the help of the 'mysqldbname' parameter...

UCMS Cross-Site Scripting Vulnerability (CNVD-2018-19624)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in the install/index.php page in UCMS version 1.4.6. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'mysqldbname' parameter...

UCMS Elevation of Privilege Vulnerability

UCMS is a content management system written in PHP. A security vulnerability exists in the user/editpost.php file in UCMS version 1.4.6. An attacker can exploit this vulnerability to elevate an ordinary user's level 1 privileges to a super user's level 3 privileges...

Arbitrary File Upload Vulnerability in UCMS Version 1.4.6

UCMS is a simple open source content management system, it can be very convenient to quickly develop various kinds of enterprise station, article station and station system. A file upload vulnerability exists in the \ucms\sadmin\fi.php page of UCMS version 1.4.6. An attacker can exploit the...

SQL Injection Vulnerability in the Backend of ucms v1.4.5

UCMS is a simple open source content management system. ucms v1.4.5 ucms/ucms/sadmin/cineditpost.php file SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

Arbitrary File Editing Vulnerability in UCMS Version 1.2

UCMS is a simple open source content management system. UCMS 1.2 version of the existence of arbitrary file editing vulnerability, the attacker can edit the non-existent script file, directly write a sentence Trojan horse, to obtain control of the web server...

ucms 1.4.3 SQL注入

...

UCMS v1.4.3 一处SQL注入

...

UCMS Site Settings interface the presence of stored-xss vulnerabilities

No description provided by source...

File Inclusion Vulnerability in ucms

UCMS is an open source content management system, which can be used to develop various kinds of enterprise stations, article stations and station systems. ucms file inclusion vulnerability. Due to ucms/ucms/index.php background home page in the do parameters externally controllable, attackers can...

Arbitrary File Upload Vulnerability in ucms

UCMS is an open source content management system that can be used to develop a variety of various enterprise stations, article stations and station systems. ucms background file management system file upload vulnerability. As the program does not judge the upload file, allowing attackers to explo...

Ucms <= 1.8 Backdoor Remote Command Execution Exploit

No description provided by source. html !-- Ucms 1.4, 1.7, 1.8+?all Non Public exploit by 2²hot²2 a.k.a D4m14n and shadowleet Contact: [email protected] Or [email protected] Short description: Ucms is a warez-cms coded by madmax, he selled the cms for 150 Euro for one cms, but it´s not...

ucms-backdoor.txt

Opencosmo Security http://www.opencosmo.com Ucms v. 1.8 Np exploit function sethostseite document.host.action = seite + 'index.php?&q=test&e=1'; document.all.data.innerHTML = document.host.action; /he...

Ucms &lt;= 1.8 Backdoor Remote Command Execution Exploit

Opencosmo Security http://www.opencosmo.com html !-- Ucms 1.4, 1.7, 1.8+?all Non Public exploit by 2ІhotІ2 a.k.a D4m14n and shadowleet Contact: [email protected] Or [email protected] Short description: Ucms is a warez-cms coded by madmax, he selled the cms for 150 Euro for one cms, but...