CVE-2024-13194

CVE-2024-13194 affects Sucms 1.0. The vulnerability is in the file /admin/admin_members.php?ac=search, where manipulation of the uid parameter leads to SQL injection. Exploitation is remote and the exploit has been disclosed publicly. The cited disclosures consistently describe this as a critical...

CVE-2025-25759

CVE-2025-25759 concerns an issue in the SUCMS v1.0 admin_template.php component that allows a attacker to perform a directory traversal and trigger arbitrary file deletion via a crafted GET request. The CVE is described with a CVSSv3.1 base score of 7.5 (High) with network attack vector and no us...

CVE-2025-25760

The CVE-2025-25760 entry covers a Server-Side Request Forgery (SSRF) vulnerability in the SUCMS v1.0 framework, specifically in the admin_webgather.php component. The affected software is SUCMS v1.0; the vulnerability is triggered by a crafted GET request, enabling an attacker to access internal ...

CVE-2023-2768

CVE-2023-2768 affects Sucms 1.0, specifically the admin_ads.php?action=add endpoint. The vulnerability arises from manipulation of the intro parameter, leading to cross-site scripting. The issue can be exploited remotely, and public exploits have been disclosed. Multiple connected documents corro...