Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:ftcms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductFtcms (4c6093dc-a5be-54cb-8f97-66f4f376ad47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2133 vulnerable 2026-06-08 07:14:58.069040 ftcms edit cross site scripting
LOW (2.4)
A vulnerability classified as problematic was found in ftcms 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/index.php/news/edit. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-09T23:31:04.962Z
Updated: 2025-03-10T17:24:28.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2132 vulnerable 2026-06-08 07:14:58.067751 ftcms Search ajax_all_lists sql injection
MEDIUM (4.7)
A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/index.php/web/ajax_all_lists of the component Search. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-09T23:00:06.280Z
Updated: 2025-03-10T17:38:58.551Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.