Usualtoolcms Security Vulnerabilities and Issues — Usualtoolcms CVE List

Lucene search

UsualtoolUsualtoolcms

2 matches found

CVE•added 2018/12/13 8:29 a.m.•41 views

CVE-2018-20128

An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files via a backname[] directory-traversal pathname followed by a crafted substring.

7.5CVSS7.4AI score0.00883EPSS

CVE•added 2018/10/17 4:29 a.m.•29 views

CVE-2018-18422

UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI.

8.8CVSS8.6AI score0.00145EPSS