Dromara UJCMS ImportDataController import-channel importChanel injection

A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-For function in the…

Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature

File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload

Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal

An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip

A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic

A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under…

Dromara UJCMS User ID id authorization

Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting

Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting

A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items

File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via a crafted file

Dromara UJCMS UserController UserController.java usernameExist improper authorization

A Stored Cross-Site Scripting (XSS) vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3

Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine