Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal

An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to execute arbitrary code via uploading a…

Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function

PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl

Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage

PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code

A remote code execution issue was discovered in PublicCMS V4.0.20180210

PublicCMS V5.202506.b is vulnerable to SSRF

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file

PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray parameter at /site/ScriptComponent.java

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted…

PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/ueditor?action=catchimage

PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/#maintenance_sysTask/edit

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted…

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted…

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading…

An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function

An issue was discovered in PublicCMS V4.0.20180210

PublicCMS v5.202506.d and earlier is vulnerable to stored XSS

OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME,…

Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method

Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal

publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaData

Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error

PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component

An issue was discovered in PublicCMS V4.0.20180210

An issue was discovered in PublicCMS V4.0.20180210

Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine

Sanluan PublicCMS viewer.html redirect

Sanluan PublicCMS preview.html redirect

sanluan PublicCMS Tab dwz.min.js initLink cross site scripting

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting (XSS) in the Content Search module

Sanluan PublicCMS Tag Type save cross site scripting

PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS)

Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case

Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key

Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication

PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java

An issue was discovered in PublicCMS V4.0.180825

Public CMS Voting Management save cross site scripting

PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment feature

An issue was discovered in PublicCMS V4.0

Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine