Skip to content
Otcms vulnerabilities
Newest
-
otcms
Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read...
CVE-2026-30637
7.5 High
-
otcms
OtCMS <=V7.46 is vulnerable to Server-Side Request Forgery (SSRF) in /admin/read.php, which can...
CVE-2024-57252
4.3 Medium
-
otcms
OTCMS ind_backstage.php sql injection
CVE-2023-6772
4.7 Medium
-
otcms
OTCMS path traversal
CVE-2023-3241
3.5 Low
-
otcms
OTCMS usersNews_deal.php path traversal
CVE-2023-3240
3.5 Low
-
otcms
OTCMS path traversal
CVE-2023-3239
3.5 Low
-
otcms
OTCMS server-side request forgery
CVE-2023-3238
6.3 Medium
-
otcms
OTCMS hard-coded password
CVE-2023-3237
6.3 Medium
-
otcms
OTCMS unrestricted upload
CVE-2023-1797
6.3 Medium
-
otcms
OTCMS apiRun.php AutoRun cross site scripting
CVE-2023-1635
3.5 Low
-
otcms
OTCMS URL Parameter info_deal.php UseCurl server-side request forgery
CVE-2023-1634
6.3 Medium
-
otcms
OTCMS v3.85 allows arbitrary PHP Code Execution because admin/sysCheckFile_deal.php blocks "into...
CVE-2019-17370
7.2 High
-
otcms
OTCMS v3.85 has CSRF in the admin/member_deal.php Admin Panel page, leading to creation of a new...
CVE-2019-17369
6.5 Medium
-
otcms
OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request.
CVE-2019-13971
6.1 Medium
-
otcms
OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.
CVE-2018-17364
8.1 High
-
otcms
An issue was discovered in OTCMS 3.61. XSS exists in admin/share_switch.php via these parameters:...
CVE-2018-17086
6.1 Medium
-
otcms
An issue was discovered in OTCMS 3.61. XSS exists in admin/users.php via these parameters:...
CVE-2018-17085
6.1 Medium
-
otcms
OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin...
CVE-2018-8973
6.1 Medium