Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
taocms taocms 3.0.2 vulnerabilities and exploits
(subscribe to this query)
446
VMScore
CVE-2022-23387
An issue exists in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field.
Taocms Taocms 3.0.2
NA
CVE-2021-34167
Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote malicious users to gain escalated privileges via taocms/admin/admin.php.
Taogogo Taocms 3.0.2
356
VMScore
CVE-2021-46203
Taocms v3.0.2 exists to contain an arbitrary file read vulnerability via the path parameter.
Taogogo Taocms 3.0.2
668
VMScore
CVE-2022-23880
An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows malicious users to execute arbitrary code via a crafted PHP file.
Taogogo Taocms 3.0.2
NA
CVE-2022-46998
An issue in the website background of taocms v3.0.2 allows malicious users to execute a Server-Side Request Forgery (SSRF).
Taogogo Taocms 3.0.2
668
VMScore
CVE-2021-45014
There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26
Taogogo Taocms 3.0.2
570
VMScore
CVE-2021-45015
taocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\include\Model\file.php from line 60 to line 72.
Taogogo Taocms 3.0.2
357
VMScore
CVE-2022-23316
An issue exists in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.
Taogogo Taocms 3.0.2
580
VMScore
CVE-2022-23380
There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.
Taogogo Taocms 3.0.2
NA
CVE-2022-48006
An arbitrary file upload vulnerability in taocms v3.0.2 allows malicious users to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php.
Taogogo Taocms 3.0.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege escalation
CVE-2024-20696
CVE-2024-29829
CVE-2024-33999
CVE-2024-35646
physical
CVE-2024-24919
CVE-2024-31030
local users
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »