Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
taogogo taocms 3.0.2 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2021-45014
There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26
Taogogo Taocms 3.0.2
7.5
CVSSv2
CVE-2022-25578
taocms v3.0.2 allows malicious users to execute code injection via arbitrarily editing the .htaccess file.
Taogogo Taocms 3.0.2
NA
CVE-2022-36261
An arbitrary file deletion vulnerability exists in taocms 3.0.2, that allows malicious user to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt
Taogogo Taocms 3.0.2
NA
CVE-2022-36262
An issue exists in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
Taogogo Taocms 3.0.2
NA
CVE-2021-34167
Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote malicious users to gain escalated privileges via taocms/admin/admin.php.
Taogogo Taocms 3.0.2
7.5
CVSSv2
CVE-2021-46204
Taocms v3.0.2 exists to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\include\Model\Article.php.
Taogogo Taocms 3.0.2
NA
CVE-2022-48006
An arbitrary file upload vulnerability in taocms v3.0.2 allows malicious users to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php.
Taogogo Taocms 3.0.2
NA
CVE-2023-34654
taocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS).
Taogogo Taocms
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2