İçeriğe atla
Noroxi

ucms project kayıtları

ucms project üreticisine ait 28 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

28 kayıt
  • CVE-2020-25483
    42Planlayın

    An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access

    KritikCVSS 9,8İstismar yokEPSS %8

    ucms project · ucms23 Eki 2020

  • CVE-2020-25537
    40Planlayın

    File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permis

    KritikCVSS 9,8İstismar yokEPSS %1

    ucms project · ucms30 Kas 2020

  • CVE-2018-17036
    39İzleyin

    An issue was discovered in UCMS 1.4.6 and 1.6.

    KritikCVSS 9,8İstismar yokEPSS %1

    ucms project · ucms14 Eyl 2018

  • CVE-2022-38297
    39İzleyin

    UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.

    KritikCVSS 9,8İstismar yokEPSS %1

    ucms project · ucms12 Eyl 2022

  • CVE-2018-17035
    39İzleyin

    UCMS 1.4.6 has SQL injection during installation via the install/index.php mysql_dbname parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    ucms project · ucms14 Eyl 2018

  • CVE-2022-35426
    39İzleyin

    UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

    KritikCVSS 9,8İstismar yokEPSS %1

    ucms project · ucms10 Ağu 2022

  • CVE-2023-1303
    39İzleyin

    UCMS System File Management Module fileedit.php unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %0

    ucms project · ucms9 Mar 2023

  • CVE-2022-28440
    36İzleyin

    An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.

    YüksekCVSS 8,8İstismar yokEPSS %1

    ucms project · ucms21 Nis 2022

  • CVE-2022-28443
    36İzleyin

    UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability.

    KritikCVSS 9,1İstismar yokEPSS %0

    ucms project · ucms21 Nis 2022

  • CVE-2018-20599
    35İzleyin

    UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action.

    YüksekCVSS 8,8İstismar yokEPSS %1

    ucms project · ucms30 Ara 2018

  • CVE-2019-12251
    35İzleyin

    sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.

    YüksekCVSS 8,8İstismar yokEPSS %1

    ucms project · ucms21 May 2019

  • CVE-2018-19437
    35İzleyin

    UCMS 1.4.7 allows remote authenticated users to change the administrator password because $_COOKIE['admin_'.cookiehash] is used for arbitrar

    YüksekCVSS 8,8İstismar yokEPSS %1

    ucms project · ucms22 Kas 2018

  • CVE-2022-42234
    35İzleyin

    There is a file inclusion vulnerability in the template management module in UCMS 1.6

    YüksekCVSS 8,8İstismar yokEPSS %0

    ucms project · ucms14 Eki 2022

  • CVE-2018-17037
    35İzleyin

    user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3.

    YüksekCVSS 8,8İstismar yokEPSS %0

    ucms project · ucms14 Eyl 2018

  • CVE-2018-20598
    35İzleyin

    UCMS 1.4.7 has ?do=user_addpost CSRF.

    YüksekCVSS 8,8İstismar yokEPSS %0

    ucms project · ucms30 Ara 2018

  • CVE-2022-28444
    30İzleyin

    UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.

    YüksekCVSS 7,5İstismar yokEPSS %1

    ucms project · ucms21 Nis 2022

  • CVE-2018-16804
    24İzleyin

    An issue was discovered in UCMS 1.4.6.

    OrtaCVSS 6,1İstismar yokEPSS %0

    ucms project · ucms7 Mar 2019

  • CVE-2018-20600
    24İzleyin

    sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.

    OrtaCVSS 6,1İstismar yokEPSS %0

    ucms project · ucms30 Ara 2018

  • CVE-2018-17034
    24İzleyin

    UCMS 1.4.6 has XSS via the install/index.php mysql_dbname parameter.

    OrtaCVSS 6,1İstismar yokEPSS %0

    ucms project · ucms14 Eyl 2018

  • CVE-2018-17320
    24İzleyin

    An issue was discovered in UCMS 1.4.6.

    OrtaCVSS 6,1İstismar yokEPSS %0

    ucms project · ucms21 Eyl 2018

  • CVE-2022-38527
    24İzleyin

    UCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import function under the Site Management page.

    OrtaCVSS 6,1İstismar yokEPSS %0

    ucms project · ucms19 Eyl 2022

  • CVE-2023-2294
    24İzleyin

    UCMS Column Configuration saddpost.php cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    ucms project · ucms26 Nis 2023

  • CVE-2023-5015
    24İzleyin

    UCMS cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    ucms project · ucms16 Eyl 2023

  • CVE-2020-24981
    21İzleyin

    An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8.

    OrtaCVSS 5,3İstismar yokEPSS %0

    ucms project · ucms4 Eyl 2020

  • CVE-2021-25809
    21İzleyin

    UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php.

    OrtaCVSS 5,3İstismar yokEPSS %0

    ucms project · ucms23 Tem 2021