Vulnerabilities

TI-2025-01551 CVE-2025-1799 · GHSA-w96f-mfj2-5p98

Zorlan SkyCaiji Tool.php previewAction server-side request forgery

MEDIUM 57

A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00327 Published 2025-03-01 No fix listed CWE-918

TI-2025-01543 CVE-2025-1791 · GHSA-2fw5-hcch-p3cj

Zorlan SkyCaiji Tool.php fileAction unrestricted upload

MEDIUM 57

A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00395 Published 2025-03-01 No fix listed CWE-284

TI-2024-26225 CVE-2024-39243 · GHSA-2g4v-8vvw-r8m9

An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted…

MEDIUM 49

An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2024-06-26 No fix listed CWE-75

TI-2024-26224 CVE-2024-39242 · GHSA-23wq-qm4c-6497

A cross-site scripting (XSS) vulnerability in skycaiji v2.8 allows attackers to execute…

LOW 27

A cross-site scripting (XSS) vulnerability in skycaiji v2.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload using eval(String.fromCharCode()).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00278 Published 2024-06-26 No fix listed CWE-79

TI-2024-26223 CVE-2024-39241 · GHSA-952j-g655-5gm9

Cross Site Scripting (XSS) vulnerability in skycaiji 2.8 allows attackers to run arbitrary code via /admin/tool/preview.

LOW 27

Cross Site Scripting (XSS) vulnerability in skycaiji 2.8 allows attackers to run arbitrary code via /admin/tool/preview.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00278 Published 2024-06-26 No fix listed CWE-79

TI-2024-05799 CVE-2024-6252 · GHSA-c45h-95rf-26qw

Zorlan SkyCaiji Task cross site scripting

MEDIUM 56

A vulnerability has been found in Zorlan SkyCaiji up to 2.8 and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00354 Published 2024-06-22 No fix listed CWE-79

TI-2023-16522 CVE-2023-33394 · GHSA-frf5-gv46-45f5

skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS).

LOW 25

skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.004 Published 2023-05-26 No fix listed CWE-79

TI-2022-21786 CVE-2022-44351 · GHSA-78q7-g56j-79qx

Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php.

MEDIUM 44

Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00939 Published 2022-12-07 No fix listed CWE-502

TI-2022-10907 CVE-2022-28096 · GHSA-4w73-rc2p-p6jp

Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via…

MEDIUM 51

Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.20642 Published 2022-05-04 No fix listed

TI-2020-13482 CVE-2020-18878 · GHSA-jpqm-4942-9wpm

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive…

LOW 27

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01702 Published 2021-08-20 No fix listed CWE-22

TI-2018-08111 CVE-2018-11371 · GHSA-5m43-r8f5-q8wm

SkyCaiji 1.2 allows CSRF to add an Administrator user.

LOW 39

SkyCaiji 1.2 allows CSRF to add an Administrator user.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00643 Published 2018-05-22 No fix listed CWE-352

Vulnerabilities

Filters