Ucms Project

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Ucms Project records in CISA KEV

No Ucms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ucms 28 records MEDIUM

Records

28 records in Ucms · all components

TI-2022-18118 CVE-2022-38527 · GHSA-6fq3-95c8-gxgx

UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the…

MEDIUM 60

UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import function under the Site Management page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00572 Published 2022-09-19 No fix listed CWE-79

TI-2020-15572 CVE-2020-25483 · GHSA-qwr5-5v38-5gf5

An arbitrary command execution vulnerability exists in the fopen() function of file…

MEDIUM 53

An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0865 Published 2020-10-23 No fix listed CWE-434

TI-2020-15589 CVE-2020-25537 · GHSA-vf9r-c7v2-7275

File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of…

MEDIUM 46

File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01856 Published 2020-11-30 No fix listed CWE-434

TI-2022-17955 CVE-2022-38297 · GHSA-ch9m-4jxr-g98q

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.

MEDIUM 45

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01302 Published 2022-09-12 No fix listed CWE-565

TI-2018-12173 CVE-2018-17036 · GHSA-g4cv-96p3-5rqp

An issue was discovered in UCMS 1.4.6 and 1.6.

MEDIUM 45

An issue was discovered in UCMS 1.4.6 and 1.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01658 Published 2018-09-14 No fix listed CWE-94

TI-2022-15995 CVE-2022-35426 · GHSA-7g98-5gp8-66pw

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

MEDIUM 44

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2022-08-09 No fix listed CWE-434

TI-2018-12172 CVE-2018-17035 · GHSA-pp33-w7j9-xrfj

UCMS 1.4.6 has SQL injection during installation via the install/index.php mysql_dbname parameter.

MEDIUM 44

UCMS 1.4.6 has SQL injection during installation via the install/index.php mysql_dbname parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01135 Published 2018-09-14 No fix listed CWE-89

TI-2023-01230 CVE-2023-1303 · GHSA-646v-93pq-q849

UCMS System File Management Module fileedit.php unrestricted upload

MEDIUM 43

A vulnerability was found in UCMS 1.6 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00792 Published 2023-03-09 No fix listed CWE-434

TI-2022-11175 CVE-2022-28443 · GHSA-fj95-66r4-8f7j

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.

MEDIUM 41

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00987 Published 2022-04-21 No fix listed

TI-2022-11174 CVE-2022-28440 · GHSA-89m6-6f9x-8vwg

An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.

MEDIUM 41

An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01721 Published 2022-04-21 No fix listed CWE-434

TI-2019-09139 CVE-2019-12251 · GHSA-hqgx-cm24-cwv8

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.

MEDIUM 41

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01246 Published 2019-05-21 No fix listed CWE-89

TI-2018-14620 CVE-2018-20599 · GHSA-gq93-8wpv-4mpx

UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code…

MEDIUM 41

UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01526 Published 2018-12-30 No fix listed CWE-94

TI-2022-20461 CVE-2022-42234 · GHSA-m3x3-92m3-68hj

There is a file inclusion vulnerability in the template management module in UCMS 1.6

MEDIUM 40

There is a file inclusion vulnerability in the template management module in UCMS 1.6

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0099 Published 2022-10-14 No fix listed CWE-552

TI-2018-13761 CVE-2018-19437 · GHSA-298v-7gc3-86vj

UCMS 1.4.7 allows remote authenticated users to change the administrator password because…

MEDIUM 40

UCMS 1.4.7 allows remote authenticated users to change the administrator password because $_COOKIE['admin_'.cookiehash] is used for arbitrary cookie values that are set and not empty.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01124 Published 2018-11-22 No fix listed

TI-2018-12174 CVE-2018-17037 · GHSA-6hg6-3rfr-94g3

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the…

MEDIUM 40

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00957 Published 2018-09-14 No fix listed CWE-732

TI-2018-14619 CVE-2018-20598 · GHSA-8jg8-qhg3-2m65

UCMS 1.4.7 has ?do=user_addpost CSRF.

LOW 39

UCMS 1.4.7 has ?do=user_addpost CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00527 Published 2018-12-30 No fix listed CWE-352

TI-2022-11176 CVE-2022-28444 · GHSA-wx84-836p-vqhx

UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.

LOW 36

UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01529 Published 2022-04-21 No fix listed CWE-22

TI-2018-12033 CVE-2018-16804 · GHSA-3cm6-82pp-x646

An issue was discovered in UCMS 1.4.6.

LOW 29

An issue was discovered in UCMS 1.4.6.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00826 Published 2019-03-07 No fix listed CWE-79

TI-2023-04617 CVE-2023-5015 · GHSA-q44m-84x7-cpxh

UCMS cross site scripting

LOW 28

A vulnerability was found in UCMS 1.4.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00484 Published 2023-09-17 No fix listed CWE-79

TI-2023-02151 CVE-2023-2294 · GHSA-q863-hgjr-8mqw

UCMS Column Configuration saddpost.php cross site scripting

LOW 28

A vulnerability was found in UCMS 1.6.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00549 Published 2023-04-26 No fix listed CWE-79

TI-2018-14621 CVE-2018-20600 · GHSA-7hg3-pw9j-mm9v

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.

LOW 28

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2018-12-30 No fix listed CWE-79

TI-2018-12356 CVE-2018-17320 · GHSA-4m8q-gch8-mc2x

An issue was discovered in UCMS 1.4.6.

LOW 28

An issue was discovered in UCMS 1.4.6.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00655 Published 2018-09-21 No fix listed CWE-79

TI-2018-12171 CVE-2018-17034 · GHSA-pgj5-frhf-w58m

UCMS 1.4.6 has XSS via the install/index.php mysql_dbname parameter.

LOW 28

UCMS 1.4.6 has XSS via the install/index.php mysql_dbname parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2018-09-14 No fix listed CWE-79

TI-2021-07876 CVE-2021-25809 · GHSA-34r8-h3gq-qmjj

UCMS 1.5.0 was discovered to contain a physical path leakage via an error message…

LOW 26

UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00934 Published 2021-07-23 No fix listed CWE-209

TI-2020-15261 CVE-2020-24981 · GHSA-r55p-2vrg-6w4h

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8.

LOW 26

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00952 Published 2020-09-04 No fix listed

Open these records in search →

Critical	8
High	8
Medium	12
Low	0
No CVSS	0