Vulnerabilities

TI-2024-09202 CVE-2024-9918 · GHSA-gj2r-2pgf-9327

HuangDou UTCMS sql.php RunSql sql injection

MEDIUM 56

A vulnerability has been found in HuangDou UTCMS V9 and classified as critical.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00566 Published 2024-10-13 No fix listed CWE-89

TI-2024-09201 CVE-2024-9917 · GHSA-42vf-2jww-9pqr

MEDIUM 57

A vulnerability, which was classified as critical, was found in HuangDou UTCMS V9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0877 Published 2024-10-13 No fix listed CWE-502

TI-2024-09200 CVE-2024-9916 · GHSA-6fxj-7699-3hq7

HIGH 75

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.73617 Published 2024-10-13 No fix listed CWE-78

TI-2019-04442 CVE-2019-6244 · GHSA-q82p-mqwv-g78v

LOW 39

An issue was discovered in UsualToolCMS 8.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2019-01-12 No fix listed CWE-352

TI-2018-14258 CVE-2018-20128 · GHSA-wgjx-pg85-qphq

LOW 36

An issue was discovered in UsualToolCMS v8.0.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01545 Published 2018-12-13 No fix listed CWE-22

TI-2018-13025 CVE-2018-18422 · GHSA-47gc-w76h-c45c

LOW 39

UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00494 Published 2018-10-17 No fix listed CWE-352