Baicloud-Cms Project Baicloud-Cms

2 CVEs affecting Baicloud-Cms Project Baicloud-Cms. Latest disclosed: 2022-02-19. Critical: 1, High: 1.

Top CVEs affecting Baicloud-Cms Project Baicloud-Cms
CVESeverityScorePublishedSummary
CVE-2021-41729Critical9.12021-09-30BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/pps…
CVE-2021-44302High8.82022-02-19BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.