Login Request a demo
SA
Vendor
Sanluan
1 product with CVEs on record
56
CVEs
0
On KEV
1
New 30D
Products
PU
PublicCMS
Sanluan
9.8
56 CVEs0 on KEV1 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109160
PU
PublicCMS
Publiccms
4.3
0%
Oct 13PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect
CVE-2026-97721
PU
PublicCMS
Sanluan
2.7
0%
Sep 25Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization
CVE-2026-8740
PU
PublicCMS
Sanluan
6.3
0%
May 17Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine
CVE-2026-8739
PU
PublicCMS
Sanluan
5.3
0%
May 17Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key
CVE-2026-8738
PU
PublicCMS
Sanluan
6.5
0%
May 17Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error
CVE-2026-8737
PU
PublicCMS
Sanluan
5.3
0%
May 17Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication
CVE-2026-6797
PU
PublicCMS
Sanluan
4.3
0%
Apr 21Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption
CVE-2026-6796
PU
PublicCMS
Sanluan
4.3
0%
Apr 21Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file
CVE-2026-5987
PU
PublicCMS
Sanluan
4.7
0%
Apr 9Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine
CVE-2026-3289
PU
PublicCMS
Sanluan
9.8
1%
Feb 27Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal
CVE-2025-69437
PU
Publiccms
Publiccms
8.7
0%
Feb 27PublicCMS v5.202506.d and earlier is vulnerable to stored XSS
CVE-2026-2010
PU
PublicCMS
Sanluan
4.2
0%
Feb 6Sanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization
CVE-2026-1112
PU
PublicCMS
Sanluan
8.1
0%
Jan 18Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization
CVE-2026-1111
PU
PublicCMS
Sanluan
7.2
1%
Jan 18Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal
CVE-2025-65837
PU
Publiccms
Publiccms
5.4
0%
Dec 22PublicCMS V5.202506.b is vulnerable to Cross Site Scripting (XSS) in the Content Search module
CVE-2025-65838
PU
Publiccms
Publiccms
7.5
0%
Dec 1PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method
CVE-2025-65840
PU
Publiccms
Publiccms
8.8
0%
Dec 1PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController
CVE-2025-65836
PU
Publiccms
Publiccms
9.1
0%
Dec 1PublicCMS V5.202506.b is vulnerable to SSRF
CVE-2025-57516
PU
Publiccms
Publiccms
8.2
1%
Sep 29OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME,…
CVE-2025-7953
PU
Publiccms
Publiccms
6.1
0%
Jul 22Sanluan PublicCMS viewer.html redirect
CVE-2025-7949
PU
Publiccms
Publiccms
6.1
0%
Jul 22Sanluan PublicCMS preview.html redirect
CVE-2025-25361
PU
Publiccms
Publiccms
9.8
1%
Mar 6An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to execute arbitrary code via uploading a…
CVE-2024-11175
PU
Publiccms
Publiccms
4.8
1%
Nov 13Public CMS Voting Management save cross site scripting
CVE-2024-11070
PU
Publiccms
Publiccms
5.4
0%
Nov 11Sanluan PublicCMS Tag Type save cross site scripting
CVE-2024-46410
PU
Publiccms
Publiccms
4.8
0%
Oct 8PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment feature
CVE-2024-42523
PU
Publiccms
Publiccms
7.2
1%
Aug 23publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaData
CVE-2024-40549
PU
Publiccms
Publiccms
8.8
1%
Jul 12An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted…
CVE-2024-40543
PU
Publiccms
Publiccms
8.8
0%
Jul 12PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/ueditor?action=catchimage
CVE-2024-40544
PU
Publiccms
Publiccms
8.8
0%
Jul 12PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/#maintenance_sysTask/edit
CVE-2024-40545
PU
Publiccms
Publiccms
8.8
1%
Jul 12An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted…
CVE-2024-40546
PU
Publiccms
Publiccms
8.8
1%
Jul 12An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file
CVE-2024-40547
PU
Publiccms
Publiccms
6.5
0%
Jul 12PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace
CVE-2024-40548
PU
Publiccms
Publiccms
8.8
1%
Jul 12An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file
CVE-2024-40550
PU
Publiccms
Publiccms
8.8
1%
Jul 12An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading…
CVE-2024-40551
PU
Publiccms
Publiccms
8.8
0%
Jul 12An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted…
CVE-2024-40552
PU
Publiccms
Publiccms
8.8
1%
Jul 12PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray parameter at /site/ScriptComponent.java
CVE-2024-31759
PU
Publiccms
Publiccms
8.8
1%
Apr 16An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function
CVE-2024-2911
PU
Publiccms
Publiccms
4.3
0%
Mar 26Tianjin PubliCMS cross-site request forgery
CVE-2023-51252
PU
Publiccms
Publiccms
5.4
0%
Jan 10PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-46990
PU
Publiccms
Publiccms
9.8
1%
Nov 20Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function
CVE-2023-48204
PU
Publiccms
Publiccms
6.5
1%
Nov 15An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component
CVE-2023-34852
PU
Publiccms
Publiccms
9.8
1%
Jun 15PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions
CVE-2020-20915
PU
Publiccms
Publiccms
9.8
1%
Apr 4SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl
CVE-2020-20914
PU
Publiccms
Publiccms
9.8
1%
Apr 4SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter
CVE-2022-3950
PU
Publiccms
Publiccms
6.1
0%
Nov 11sanluan PublicCMS Tab dwz.min.js initLink cross site scripting
CVE-2021-27693
PU
Publiccms
Publiccms
9.8
1%
Sep 2Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage
CVE-2022-29784
PU
Publiccms
Publiccms
5.3
1%
Jun 3PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java
CVE-2022-23389
PU
Publiccms
Publiccms
9.8
22%
Feb 14PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter
CVE-2021-40881
PU
Publiccms
Publiccms
9.8
2%
Sep 15An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code
CVE-2020-21333
PU
Publiccms
Publiccms
5.4
0%
Jul 9Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case
CVE-2018-18927
PU
Publiccms
Publiccms
4.8
1%
Nov 4An issue was discovered in PublicCMS V4.0
CVE-2018-17368
PU
Publiccms
Publiccms
5.3
1%
Sep 23An issue was discovered in PublicCMS V4.0.180825
CVE-2018-12914
PU
Publiccms
Publiccms
9.8
4%
Jun 27A remote code execution issue was discovered in PublicCMS V4.0.20180210
CVE-2018-12494
PU
Publiccms
Publiccms
6.5
2%
Jun 15An issue was discovered in PublicCMS V4.0.20180210
CVE-2018-12493
PU
Publiccms
Publiccms
6.5
2%
Jun 15An issue was discovered in PublicCMS V4.0.20180210
CVE-2018-11500
PU
Publiccms
Publiccms
8.8
1%
May 26An issue was discovered in PublicCMS V4.0.20180210