OTCMS 3.85
Approved changes feed: RSS · Atom
cpe:2.3:a:otcms:otcms:3.85:*:*:*:*:*:*:*part: a version: 3.85 update: *
| Vendor | Otcms (79ed7182-f3dc-5866-8970-e7504e7e5041) |
|---|---|
| Product | Otcms (0b1fab17-a103-5256-a1af-a9eaeff824c8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-17370 |
vulnerable | 2026-06-08 05:13:10.376404 |
Details available
OTCMS v3.85 allows arbitrary PHP Code Execution because admin/sysCheckFile_deal.php blocks "into outfile" in a SELECT statement, but does not block the "into/**/outfile" manipulation. Therefore, the attacker can create a .php file.
Published: 2019-10-09T11:04:25.000Z
Updated: 2024-08-05T01:40:15.249Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17369 |
vulnerable | 2026-06-08 05:13:10.376035 |
Details available
OTCMS v3.85 has CSRF in the admin/member_deal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin.
Published: 2019-10-09T10:55:46.000Z
Updated: 2024-08-05T01:40:15.208Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.