Skycaiji

11 CVEs across 1 Skycaiji products. Browse Skycaiji vulnerabilities, severities, and proof-of-concept exploits.

Skycaiji products with known CVEs

ProductCVEs
Skycaiji11
Skycaiji CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-1799Medium6.32025-03-01A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAction of the file vendor/skycaiji/app/ad…
CVE-2025-1791Medium6.32025-03-01A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the file vendor/skycaij…
CVE-2024-39243Critical9.82024-06-26An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.
CVE-2024-39242Medium6.12024-06-26A cross-site scripting (XSS) vulnerability in skycaiji v2.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload using eval(String.f…
CVE-2024-39241Medium6.12024-06-26Cross Site Scripting (XSS) vulnerability in skycaiji 2.8 allows attackers to run arbitrary code via /admin/tool/preview.
CVE-2024-6252Low2.42024-06-22A vulnerability has been found in Zorlan SkyCaiji up to 2.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the co…
CVE-2023-33394Medium5.42023-05-26skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS). Attackers can achieve backend XSS by deploying malicious JSON data.
CVE-2022-44351Critical9.82022-12-07Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php.
CVE-2022-28096High7.22022-05-04Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.
CVE-2020-18878Medium5.32021-08-20Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpS…
CVE-2018-11371High8.82018-05-22SkyCaiji 1.2 allows CSRF to add an Administrator user.