Approved changes feed: RSS · Atom
cpe:2.3:a:ofcms:ofcms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ofcms (03283be2-9217-5288-a226-5e066c565faf) |
|---|---|
| Product | Ofcms (ba460d5d-8b93-5a3e-8ac7-aff12957775c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-10204 |
vulnerable | 2026-06-08 07:47:13.685252 |
OFCMS JSON Query SysUserController.java query sql injection
MEDIUM (6.3)
A weakness has been identified in OFCMS 1.1.3. The affected element is the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SysUserController.java of the component JSON Query Interface. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-31T23:45:10.958Z
Updated: 2026-06-01T14:59:00.848Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10203 |
vulnerable | 2026-06-08 07:47:13.684872 |
OFCMS JSON Query SystemParamController.java query sql injection
MEDIUM (6.3)
A security flaw has been discovered in OFCMS 1.1.3. Impacted is the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SystemParamController.java of the component JSON Query Interface. The manipulation results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-31T23:30:13.868Z
Updated: 2026-06-01T13:27:15.237Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10202 |
vulnerable | 2026-06-08 07:47:13.684566 |
OFCMS JSON Query SystemDictController.java query sql injection
MEDIUM (6.3)
A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SystemDictController.java of the component JSON Query Interface. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-31T23:15:13.726Z
Updated: 2026-06-03T18:43:43.917Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10193 |
vulnerable | 2026-06-08 07:47:13.680839 |
OFCMS ComnController ComnController.java query sql injection
MEDIUM (6.3)
A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\ComnController.java of the component ComnController. Performing a manipulation of the argument system.user.query results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-31T16:15:15.527Z
Updated: 2026-06-02T14:55:21.796Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.