UCMS Project UCMS 1.4.7
Approved changes feed: RSS · Atom
cpe:2.3:a:ucms_project:ucms:1.4.7:*:*:*:*:*:*:*part: a version: 1.4.7 update: *
| Vendor | Ucms Project (2fc61bac-83be-50ff-b138-e952494a0ce4) |
|---|---|
| Product | Ucms (fa6cd0c6-c164-51f3-ad93-4c6844daa154) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5015 |
vulnerable | 2026-06-08 06:19:40.692887 |
UCMS cross site scripting
LOW (3.5)
A vulnerability was found in UCMS 1.4.7. It has been classified as problematic. Affected is an unknown function of the file ajax.php?do=strarraylist. The manipulation of the argument strdefault leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239856.
Published: 2023-09-17T01:31:05.295Z
Updated: 2024-08-02T07:44:53.772Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20781 |
vulnerable | 2026-06-08 05:22:30.553517 |
Details available
A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields.
Published: 2021-09-29T22:06:17.000Z
Updated: 2024-08-04T14:22:25.544Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12251 |
vulnerable | 2026-06-08 05:12:38.722773 |
Details available
sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.
Published: 2019-05-21T15:39:59.000Z
Updated: 2024-08-04T23:17:39.532Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20601 |
vulnerable | 2026-06-08 05:11:27.612755 |
Details available
UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.
Published: 2018-12-30T21:00:00.000Z
Updated: 2024-09-16T16:43:49.069Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20600 |
vulnerable | 2026-06-08 05:11:27.612392 |
Details available
sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.
Published: 2018-12-30T21:00:00.000Z
Updated: 2024-09-16T16:39:09.809Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20599 |
vulnerable | 2026-06-08 05:11:27.612003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20598 |
vulnerable | 2026-06-08 05:11:27.611705 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20597 |
vulnerable | 2026-06-08 05:11:27.611358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19437 |
vulnerable | 2026-06-08 05:11:15.738346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.