Usualtool Usualtoolcms
6 CVEs affecting Usualtool Usualtoolcms. Latest disclosed: 2024-10-13. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-6244 | High | 8.8 | 2019-01-12 | An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlbackx.php?t=sql allows CSRF attacks that can execute SQL statements, and consequently execute arbitr… |
CVE-2018-18422 | High | 8.8 | 2018-10-17 | UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI. |
CVE-2018-20128 | High | 7.5 | 2018-12-13 | An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files via a backname[] directory-traversal pat… |
CVE-2024-9916 | High | 7.3 | 2024-10-13 | A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/mo… |
CVE-2024-9917 | Medium | 6.3 | 2024-10-13 | A vulnerability, which was classified as critical, was found in HuangDou UTCMS V9. This affects an unknown part of the file app/modules/ut-template/admin/templ… |
CVE-2024-9918 | Medium | 4.7 | 2024-10-13 | A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/… |