Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10

Export CSV
CVE-2022-24609

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/template_manage.php, an attacker can write an arbitrary shell file.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Luocms Project
Products
Luocms
CVE-2022-24608

Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Luocms Project
Products
Luocms
CVE-2022-24601

Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information through SQL injection statements.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Luocms Project
Products
Luocms
CVE-2022-24600

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Luocms Project
Products
Luocms