Usualtool / Usualtoolcms
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-9918 | HuangDou UTCMS sql.php RunSql sql injection | MEDIUM | 5.1 | Oct 13, 2024 |
| CVE-2024-9917 | HuangDou UTCMS template_creat.php deserialization | MEDIUM | 5.3 | Oct 13, 2024 |
| CVE-2024-9916 | HuangDou UTCMS cli.php os command injection | MEDIUM | 6.9 | Oct 13, 2024 |
| CVE-2019-6244 | An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlbackx.php?t=sql allows CSRF attacks that can execute SQL statements, and consequently execute arbitr… | HIGH | 8.8 | Jan 12, 2019 |
| CVE-2018-20128 | An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files via a backname[] directory-traversal pat… | HIGH | 7.5 | Dec 13, 2018 |
| CVE-2018-18422 | UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI. | HIGH | 8.8 | Oct 17, 2018 |
Showing 1 to 6 of 6 CVEs