Taogogo Taocms 3.0.2
Approved changes feed: RSS · Atom
cpe:2.3:a:taogogo:taocms:3.0.2:*:*:*:*:*:*:*part: a version: 3.0.2 update: *
| Vendor | Taogogo (d699a470-97f1-5997-b25a-7c91b446ea36) |
|---|---|
| Product | Taocms (8d13d825-0bec-5245-bccd-c722bad8f39e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/taogogo/taocms |
purl2cpe | 2026-06-01 10:12:46.554977 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33350 |
vulnerable | 2026-06-08 06:37:31.055708 |
Details available
Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via the include/model/file.php component.
Published: 2024-04-29T00:00:00.000Z
Updated: 2024-08-02T02:27:53.622Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1947 |
vulnerable | 2026-06-08 05:52:37.267335 |
taoCMS admin.php code injection
MEDIUM (6.3)
A vulnerability was found in taoCMS 3.0.2. It has been classified as critical. Affected is an unknown function of the file /admin/admin.php. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225330 is the identifier assigned to this vulnerability.
Published: 2023-04-07T22:00:08.628Z
Updated: 2024-08-02T06:05:27.079Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48006 |
vulnerable | 2026-06-08 05:50:41.152313 |
Details available
An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php.
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-03-28T15:38:34.633Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46998 |
vulnerable | 2026-06-08 05:50:39.775917 |
Details available
An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF).
Published: 2023-01-25T00:00:00.000Z
Updated: 2025-04-01T15:18:09.656Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36262 |
vulnerable | 2026-06-08 05:46:06.484633 |
Details available
An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
Published: 2022-08-15T11:30:59.000Z
Updated: 2026-07-09T00:20:15.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36261 |
vulnerable | 2026-06-08 05:46:06.484227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25578 |
vulnerable | 2026-06-08 05:41:46.002166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25505 |
vulnerable | 2026-06-08 05:41:45.962171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23880 |
vulnerable | 2026-06-08 05:40:59.295350 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23380 |
vulnerable | 2026-06-08 05:40:57.029189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23316 |
vulnerable | 2026-06-08 05:40:56.981131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46204 |
vulnerable | 2026-06-08 05:38:03.133507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46203 |
vulnerable | 2026-06-08 05:38:03.132808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45015 |
vulnerable | 2026-06-08 05:36:47.685946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45014 |
vulnerable | 2026-06-08 05:36:47.685523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44969 |
vulnerable | 2026-06-08 05:36:47.656913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44915 |
vulnerable | 2026-06-08 05:36:47.621811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34167 |
vulnerable | 2026-06-08 05:32:12.931187 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.