Known Vulnerabilities for products from Ucms Project
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Ucms Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-5015 json | A vulnerability was found in UCMS 1.4.7. It has been classified as problematic. Affected is an unknown function of the file a... | 6.1 - MEDIUM | 2023-09-17 | 2023-11-07 |
| CVE-2023-2294 json | A vulnerability was found in UCMS 1.6.0. It has been classified as problematic. This affects an unknown part of the file sadd... | 6.1 - MEDIUM | 2023-04-26 | 2023-11-07 |
| CVE-2023-1303 json | A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadm... | 9.8 - CRITICAL | 2023-03-09 | 2023-11-07 |
| CVE-2022-42234 json | There is a file inclusion vulnerability in the template management module in UCMS 1.6 | 8.8 - HIGH | 2022-10-14 | 2022-10-17 |
| CVE-2022-38527 json | UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import function under the Site Manag... | 6.1 - MEDIUM | 2022-09-19 | 2022-09-22 |
| CVE-2022-38297 json | UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning. | 9.8 - CRITICAL | 2022-09-12 | 2022-09-15 |
| CVE-2022-35426 json | UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file. | 9.8 - CRITICAL | 2022-08-10 | 2022-08-12 |
| CVE-2022-28444 json | UCMS v1.6 was discovered to contain an arbitrary file read vulnerability. | 7.5 - HIGH | 2022-04-21 | 2022-05-02 |
| CVE-2022-28443 json | UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability. | 9.1 - CRITICAL | 2022-04-21 | 2022-05-02 |
| CVE-2022-28440 json | An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file. | 8.8 - HIGH | 2022-04-21 | 2022-05-02 |
| CVE-2021-25809 json | UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() functi... | 5.3 - MEDIUM | 2021-07-23 | 2022-06-28 |
| CVE-2020-25537 json | File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server ma... | 9.8 - CRITICAL | 2020-11-30 | 2020-12-04 |
| CVE-2020-25483 json | An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker ... | 9.8 - CRITICAL | 2020-10-23 | 2021-07-21 |
| CVE-2020-24981 json | An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an erro... | 5.3 - MEDIUM | 2020-09-04 | 2021-07-21 |
| CVE-2020-20781 json | A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute a... | 5.4 - MEDIUM | 2021-09-29 | 2021-10-03 |
| CVE-2019-12251 json | sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter. | 8.8 - HIGH | 2019-05-21 | 2019-05-21 |
| CVE-2018-20601 json | UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action. | 4.8 - MEDIUM | 2018-12-30 | 2019-01-04 |
| CVE-2018-20600 json | sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action. | 6.1 - MEDIUM | 2018-12-30 | 2019-01-04 |
| CVE-2018-20599 json | UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit ac... | 8.8 - HIGH | 2018-12-30 | 2019-01-04 |
| CVE-2018-20598 json | UCMS 1.4.7 has ?do=user_addpost CSRF. | 8.8 - HIGH | 2018-12-30 | 2019-01-04 |
Known software with vulnerabilities from Ucms Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Ucms Project | Ucms | 1.0 |