CVE-2024-13194

CVE-2024-13194 affects Sucms 1.0. The vulnerability is in the file /admin/admin_members.php?ac=search, where manipulation of the uid parameter leads to SQL injection. Exploitation is remote and the exploit has been disclosed publicly. The cited disclosures consistently describe this as a critical...

CVE-2025-25759

The SUCMS v1.0 content management system is vulnerable to a directory traversal and arbitrary file deletion flaw located in the admin_template.php component. Attackers can exploit this by sending a crafted GET request . While no specific patch version is provided, the recommended workaround is to...

CVE-2025-25760

SUCMS v1.0 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the admin_webgather.php component. Attackers can exploit this by sending a crafted GET request to access internal data and services. No official patch is currently available; as a temporary workaround, it is recommend...

CVE-2023-2768

CVE-2023-2768 affects Sucms 1.0, specifically the admin_ads.php?action=add endpoint. The vulnerability arises from manipulation of the intro parameter, leading to cross-site scripting. The issue can be exploited remotely, and public exploits have been disclosed. Multiple connected documents corro...