Vulnerabilities

Filters

1 selected

10 records

Sort

Vendor: Luocms Project Clear all filters

TI-2022-08451 CVE-2022-24609 · GHSA-38gx-pgpj-9cw5

Luocms v2.0 is affected by an incorrect access control vulnerability.

MEDIUM 45

Luocms v2.0 is affected by an incorrect access control vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0155 Published 2022-03-09 No fix listed CWE-863

TI-2022-08450 CVE-2022-24608 · GHSA-3x47-j85r-45r9

Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.

LOW 28

Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2022-03-09 No fix listed CWE-79

TI-2022-08449 CVE-2022-24607 · GHSA-9wr2-mr8j-px36

Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08448 CVE-2022-24606 · GHSA-x9v5-w5h3-xh5p

Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08447 CVE-2022-24605 · GHSA-rr65-fhm8-h6x2

Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08446 CVE-2022-24604 · GHSA-4fv8-q23c-jh2m

Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08445 CVE-2022-24603 · GHSA-w789-c58r-5fp6

Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08444 CVE-2022-24602 · GHSA-27vq-mhjm-v9gc

Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.

MEDIUM 44

Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-03-09 No fix listed CWE-89

TI-2022-08443 CVE-2022-24601 · GHSA-g7gj-m644-hhjm

Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php.

LOW 35

Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01164 Published 2022-03-09 No fix listed CWE-89

TI-2022-08442 CVE-2022-24600 · GHSA-h3pw-v84q-6pcf

Luocms v2.0 is affected by SQL Injection through /admin/login.php.

MEDIUM 45

Luocms v2.0 is affected by SQL Injection through /admin/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01305 Published 2022-03-09 No fix listed CWE-89