Luocms Project

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Luocms Project records in CISA KEV

No Luocms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Luocms 10 records MEDIUM

Records

10 records

TI-2022-08451 CVE-2022-24609 · GHSA-38gx-pgpj-9cw5

Luocms v2.0 is affected by an incorrect access control vulnerability.

MEDIUM 45

Luocms v2.0 is affected by an incorrect access control vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0155 Published 2022-03-09 No fix listed CWE-863

TI-2022-08442 CVE-2022-24600 · GHSA-h3pw-v84q-6pcf

Luocms v2.0 is affected by SQL Injection through /admin/login.php.

MEDIUM 45

Luocms v2.0 is affected by SQL Injection through /admin/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01305 Published 2022-03-09 No fix listed CWE-89

TI-2022-08449 CVE-2022-24607 · GHSA-9wr2-mr8j-px36

Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08448 CVE-2022-24606 · GHSA-x9v5-w5h3-xh5p

Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08447 CVE-2022-24605 · GHSA-rr65-fhm8-h6x2

Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08446 CVE-2022-24604 · GHSA-4fv8-q23c-jh2m

Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08445 CVE-2022-24603 · GHSA-w789-c58r-5fp6

Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08444 CVE-2022-24602 · GHSA-27vq-mhjm-v9gc

Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08443 CVE-2022-24601 · GHSA-g7gj-m644-hhjm

Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php.

LOW 35

Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01164 Published 2022-03-09 No fix listed CWE-89

TI-2022-08450 CVE-2022-24608 · GHSA-3x47-j85r-45r9

Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.

LOW 28

Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2022-03-09 No fix listed CWE-79

Open these records in search →