CVE-2023-2245

CVE-2023-2245 - hansunCMS 1.4.3 unrestricted upload . Affected component: the endpoint /ueditor/net/controller.ashx?action=catchimage in hansunCMS 1.4.3. Root cause described as manipulation allowing unrestricted upload, enabling remote exploitation. Sources indicate the vulnerability is critical...

CVE-2023-43899

CVE-2023-43899 affects Hansun CMS v1.0, with a SQL injection in the /ajax/ajax_login.ashx endpoint. The vulnerability is described across multiple sources (NVD, Red Hat, CVE lists, CNNVD, etc.) as a SQL injection risk, exposed to attackers with network access and no user interaction required. Aff...