Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
taogogo taocms vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-34654
taocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS).
Taogogo Taocms
668
VMScore
CVE-2019-7720
taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request.
Taogogo Taocms
578
VMScore
CVE-2021-25783
Taocms v2.5Beta5 exists to contain a blind SQL injection vulnerability via the function Article Search.
Taogogo Taocms 2.5
578
VMScore
CVE-2021-25784
Taocms v2.5Beta5 exists to contain a blind SQL injection vulnerability via the function Edit Article.
Taogogo Taocms 2.5
312
VMScore
CVE-2021-25785
Taocms v2.5Beta5 exists to contain a cross-site scripting (XSS) vulnerability via the component Management column.
Taogogo Taocms 2.5
312
VMScore
CVE-2021-44969
Taocms v3.0.2 exists to contain a cross-site scripting (XSS) vulnerability via the Management Column component.
Taogogo Taocms 3.0.2
356
VMScore
CVE-2021-44983
In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column.
Taogogo Taocms 3.0.1
NA
CVE-2020-20725
Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote malicious user to execute arbitrary code via the name field in admin.php.
Taogogo Taocms 2.5
NA
CVE-2023-1947
A vulnerability was found in taoCMS 3.0.2. It has been classified as critical. Affected is an unknown function of the file /admin/admin.php. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and ma...
Taogogo Taocms 3.0.2
NA
CVE-2022-36261
An arbitrary file deletion vulnerability exists in taocms 3.0.2, that allows malicious user to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt
Taogogo Taocms 3.0.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49333
CVE-2024-33901
CVE-2024-36001
CVE-2024-2835
firewall
XPath injection
authentication bypass
CVE-2024-22120
CVE-2024-32002
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »