Lucene search

K

Ukcms Security Vulnerabilities

cve
cve

CVE-2018-14911

A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index/group/upload.html to gain server control by...

7.2CVSS

7.1AI Score

0.001EPSS

2022-10-03 04:22 PM
19
cve
cve

CVE-2020-18449

Cross Site Scripting (XSS) vulnerability exists in UKCMS v1.1.10 via data in the index function in...

5.4CVSS

5.3AI Score

0.001EPSS

2021-08-12 06:15 PM
17
4
cve
cve

CVE-2020-20977

A stored cross site scripting (XSS) vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments...

5.4CVSS

5.3AI Score

0.001EPSS

2021-08-12 03:15 PM
18
5
cve
cve

CVE-2019-10888

A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via...

8.8CVSS

8.6AI Score

0.001EPSS

2019-04-05 06:29 PM
21