Content Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:ctcms:content_management_system:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ctcms (a2008881-b728-5d43-bfed-0ecee62c79a3) |
|---|---|
| Product | Content Management System (b72c67c9-8f6b-5125-b93e-05edd0b8b8cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4545 |
vulnerable | 2026-06-08 07:29:16.422724 |
CTCMS Content Management System File Tpl.php del path traversal
MEDIUM (5.4)
A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the function del of the file ctcms\apps\controllers\admin\Tpl.php of the component File Handler. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-11T19:31:04.417Z
Updated: 2025-05-12T18:57:46.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14731 |
vulnerable | 2026-06-08 07:06:35.019112 |
CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine
MEDIUM (6.3)
A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-12-15T23:32:09.187Z
Updated: 2025-12-16T15:09:13.941Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14730 |
vulnerable | 2026-06-08 07:06:35.018696 |
CTCMS Content Management System Backend System Configuration Ct_Config.php code injection
MEDIUM (4.7)
A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Published: 2025-12-15T23:02:10.435Z
Updated: 2025-12-16T15:09:44.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14729 |
vulnerable | 2026-06-08 07:06:35.017285 |
CTCMS Content Management System Backend App Configuration Ct_App.php save code injection
MEDIUM (4.7)
A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Published: 2025-12-15T23:02:07.046Z
Updated: 2025-12-16T15:09:50.859Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.