Vulnerabilities

TI-2025-19125 CVE-2025-25760 · GHSA-5cc9-m24m-vpr3

A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0…

LOW 39

A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2025-02-27 No fix listed CWE-918

TI-2025-19124 CVE-2025-25759 · GHSA-6prj-x8h3-vcvh

An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a…

MEDIUM 40

An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00671 Published 2025-02-27 No fix listed CWE-22

TI-2024-12240 CVE-2024-13194 · GHSA-7cmg-qwmj-9qjf

Sucms admin_members.php sql injection

MEDIUM 57

A vulnerability was found in Sucms 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00683 Published 2025-01-08 No fix listed CWE-74

TI-2023-02592 CVE-2023-2768 · GHSA-6cj2-qv2c-p2r4

Sucms cross site scripting

MEDIUM 58

A vulnerability was found in Sucms 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00598 Published 2023-05-17 No fix listed CWE-79

Vulnerabilities

Filters

A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0…

An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a…

Sucms admin_members.php sql injection

Sucms cross site scripting