Vendors / Sucms Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Sucms Project records in CISA KEV No Sucms Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
A vulnerability was found in Sucms 1.0.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00598 · Published 2023-05-17 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in Sucms 1.0 and classified as critical.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00683 · Published 2025-01-08 · No fix listed CWE-74
Priority MEDIUM 40
An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00671 · Published 2025-02-27 · No fix listed CWE-22
Priority LOW 39
A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00385 · Published 2025-02-27 · No fix listed CWE-918
Open these records in search → All records by CVSS severity
Critical0 High2 Medium2 Low0 No CVSS0