CVE-2022-28444

UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.

CVE-2022-28440

An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.

CVE-2022-28443

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.

CVE-2022-35426

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

CVE-2022-38297

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.

CVE-2022-42234

There is a file inclusion vulnerability in the template management module in UCMS 1.6

CVE-2022-38527

UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import function under the Site Management page.