sscms CVEs

An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.

An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templa…

SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulatio…

SiteServerCMS 7.1.3 sscms has a file read vulnerability.

SiteServer CMS 7.1.3 is vulnerable to SQL Injection.

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.