Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-44302

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Baicloud-cms Project
Products
Baicloud-cms
CVE-2021-41729

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php.

CVSS 3.1 · 9.1 Critical EPSS 1.0% KEV · Not listed
Vendors
Baicloud-cms Project
Products
Baicloud-cms