Approved changes feed: RSS · Atom
cpe:2.3:a:otcms:otcms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Otcms (79ed7182-f3dc-5866-8970-e7504e7e5041) |
|---|---|
| Product | Otcms (0b1fab17-a103-5256-a1af-a9eaeff824c8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-30637 |
vulnerable | 2026-06-08 07:57:14.133966 |
Details available
Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before. The vulnerability allows remote attackers to craft HTTP requests, without authentication, containing a URL pointing to internal services or any remote server
Published: 2026-03-27T00:00:00.000Z
Updated: 2026-03-27T20:29:17.851Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-57252 |
vulnerable | 2026-06-08 06:56:13.454191 |
Details available
OtCMS <=V7.46 is vulnerable to Server-Side Request Forgery (SSRF) in /admin/read.php, which can Read system files arbitrarily.
Published: 2025-01-17T00:00:00.000Z
Updated: 2025-01-17T21:14:18.996Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3241 |
vulnerable | 2026-06-08 06:09:38.912237 |
OTCMS path traversal
LOW (3.5)
A vulnerability was found in OTCMS up to 6.62 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/read.php?mudi=announContent. The manipulation of the argument url leads to path traversal. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231512.
Published: 2023-06-14T09:00:03.857Z
Updated: 2024-08-02T06:48:08.520Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3240 |
vulnerable | 2026-06-08 06:09:38.911776 |
OTCMS usersNews_deal.php path traversal
LOW (3.5)
A vulnerability has been found in OTCMS up to 6.62 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file usersNews_deal.php. The manipulation of the argument file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231511.
Published: 2023-06-14T08:31:04.377Z
Updated: 2024-11-21T16:06:53.483Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3239 |
vulnerable | 2026-06-08 06:09:38.911150 |
OTCMS path traversal
LOW (3.5)
A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQrCode. The manipulation of the argument img leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-231510 is the identifier assigned to this vulnerability.
Published: 2023-06-14T08:31:03.407Z
Updated: 2024-08-02T06:48:08.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3238 |
vulnerable | 2026-06-08 06:09:38.910678 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3237 |
vulnerable | 2026-06-08 06:09:38.909792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.