Vulnerabilities

TI-2023-04617 CVE-2023-5015 · GHSA-q44m-84x7-cpxh

UCMS cross site scripting

LOW 28

A vulnerability was found in UCMS 1.4.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00484 Published 2023-09-17 No fix listed CWE-79

TI-2023-02151 CVE-2023-2294 · GHSA-q863-hgjr-8mqw

UCMS Column Configuration saddpost.php cross site scripting

LOW 28

A vulnerability was found in UCMS 1.6.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00549 Published 2023-04-26 No fix listed CWE-79

TI-2023-01230 CVE-2023-1303 · GHSA-646v-93pq-q849

UCMS System File Management Module fileedit.php unrestricted upload

MEDIUM 43

A vulnerability was found in UCMS 1.6 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00792 Published 2023-03-09 No fix listed CWE-434

TI-2022-20461 CVE-2022-42234 · GHSA-m3x3-92m3-68hj

There is a file inclusion vulnerability in the template management module in UCMS 1.6

MEDIUM 40

There is a file inclusion vulnerability in the template management module in UCMS 1.6

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0099 Published 2022-10-14 No fix listed CWE-552

TI-2022-18118 CVE-2022-38527 · GHSA-6fq3-95c8-gxgx

UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the…

MEDIUM 60

UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import function under the Site Management page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00572 Published 2022-09-19 No fix listed CWE-79

TI-2022-17955 CVE-2022-38297 · GHSA-ch9m-4jxr-g98q

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.

MEDIUM 45

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01302 Published 2022-09-12 No fix listed CWE-565

TI-2022-15995 CVE-2022-35426 · GHSA-7g98-5gp8-66pw

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

MEDIUM 44

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2022-08-09 No fix listed CWE-434

TI-2022-11174 CVE-2022-28440 · GHSA-89m6-6f9x-8vwg

An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.

MEDIUM 41

An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01721 Published 2022-04-21 No fix listed CWE-434

TI-2022-11176 CVE-2022-28444 · GHSA-wx84-836p-vqhx

UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.

LOW 36

UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01529 Published 2022-04-21 No fix listed CWE-22

TI-2022-11175 CVE-2022-28443 · GHSA-fj95-66r4-8f7j

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.

MEDIUM 41

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00987 Published 2022-04-21 No fix listed

TI-2020-13927 CVE-2020-20781 · GHSA-5856-fxw2-73vr

A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS…

LOW 25

A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or cont…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00503 Published 2021-09-29 No fix listed CWE-79

TI-2021-07876 CVE-2021-25809 · GHSA-34r8-h3gq-qmjj

UCMS 1.5.0 was discovered to contain a physical path leakage via an error message…

LOW 26

UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00934 Published 2021-07-23 No fix listed CWE-209

TI-2020-15589 CVE-2020-25537 · GHSA-vf9r-c7v2-7275

File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of…

MEDIUM 46

File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01856 Published 2020-11-30 No fix listed CWE-434

TI-2020-15572 CVE-2020-25483 · GHSA-qwr5-5v38-5gf5

An arbitrary command execution vulnerability exists in the fopen() function of file…

MEDIUM 53

An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0865 Published 2020-10-23 No fix listed CWE-434

TI-2020-15261 CVE-2020-24981 · GHSA-r55p-2vrg-6w4h

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8.

LOW 26

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00952 Published 2020-09-04 No fix listed

TI-2019-09139 CVE-2019-12251 · GHSA-hqgx-cm24-cwv8

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.

MEDIUM 41

sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01246 Published 2019-05-21 No fix listed CWE-89

TI-2018-12033 CVE-2018-16804 · GHSA-3cm6-82pp-x646

An issue was discovered in UCMS 1.4.6.

LOW 29

An issue was discovered in UCMS 1.4.6.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00826 Published 2019-03-07 No fix listed CWE-79

TI-2018-14622 CVE-2018-20601 · GHSA-p5g6-mc5f-x2hr

UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.

LOW 23

UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2018-12-30 No fix listed CWE-79

TI-2018-14621 CVE-2018-20600 · GHSA-7hg3-pw9j-mm9v

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.

LOW 28

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2018-12-30 No fix listed CWE-79

TI-2018-14620 CVE-2018-20599 · GHSA-gq93-8wpv-4mpx

UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code…

MEDIUM 41

UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01526 Published 2018-12-30 No fix listed CWE-94

TI-2018-14619 CVE-2018-20598 · GHSA-8jg8-qhg3-2m65

UCMS 1.4.7 has ?do=user_addpost CSRF.

LOW 39

UCMS 1.4.7 has ?do=user_addpost CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00527 Published 2018-12-30 No fix listed CWE-352

TI-2018-14618 CVE-2018-20597 · GHSA-9pqr-cmhp-hg7x

UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.

LOW 23

UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00553 Published 2018-12-30 No fix listed CWE-79

TI-2018-13761 CVE-2018-19437 · GHSA-298v-7gc3-86vj

UCMS 1.4.7 allows remote authenticated users to change the administrator password because…

MEDIUM 40

UCMS 1.4.7 allows remote authenticated users to change the administrator password because $_COOKIE['admin_'.cookiehash] is used for arbitrary cookie values that are set and not empty.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01124 Published 2018-11-22 No fix listed

TI-2018-12356 CVE-2018-17320 · GHSA-4m8q-gch8-mc2x

An issue was discovered in UCMS 1.4.6.

LOW 28

An issue was discovered in UCMS 1.4.6.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00655 Published 2018-09-21 No fix listed CWE-79

TI-2018-12174 CVE-2018-17037 · GHSA-6hg6-3rfr-94g3

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the…

MEDIUM 40

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00957 Published 2018-09-14 No fix listed CWE-732

Vulnerabilities

Filters