Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
taogogo vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2019-7720
taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request.
Taogogo Taocms
6.1
CVSSv3
CVE-2023-34654
taocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS).
Taogogo Taocms
9.8
CVSSv3
CVE-2022-25578
taocms v3.0.2 allows malicious users to execute code injection via arbitrarily editing the .htaccess file.
Taogogo Taocms 3.0.2
9.8
CVSSv3
CVE-2022-46998
An issue in the website background of taocms v3.0.2 allows malicious users to execute a Server-Side Request Forgery (SSRF).
Taogogo Taocms 3.0.2
6.5
CVSSv3
CVE-2021-46203
Taocms v3.0.2 exists to contain an arbitrary file read vulnerability via the path parameter.
Taogogo Taocms 3.0.2
8.8
CVSSv3
CVE-2021-34167
Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote malicious users to gain escalated privileges via taocms/admin/admin.php.
Taogogo Taocms 3.0.2
9.8
CVSSv3
CVE-2022-25505
Taocms v3.0.2 exists to contain a SQL injection vulnerability via the id parameter in \include\Model\Category.php.
Taogogo Taocms 3.0.2
9.8
CVSSv3
CVE-2023-1947
A vulnerability was found in taoCMS 3.0.2. It has been classified as critical. Affected is an unknown function of the file /admin/admin.php. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and ma...
Taogogo Taocms 3.0.2
6.1
CVSSv3
CVE-2020-20725
Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote malicious user to execute arbitrary code via the name field in admin.php.
Taogogo Taocms 2.5
4.8
CVSSv3
CVE-2021-44969
Taocms v3.0.2 exists to contain a cross-site scripting (XSS) vulnerability via the Management Column component.
Taogogo Taocms 3.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
bypass
open redirect
CVE-2024-4358
CVE-2024-24199
CVE-2024-5550
CVE-2024-5305
CVE-2024-30373
CVE-2024-1800
deserialization
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »