Skip to content

Taogogo Taocms vulnerabilities

taocmsDirectory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary...CVE-2024-333509.8 CriticalApril 29, 2024
taogogo taocmstaocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS).CVE-2023-346546.1 MediumJuly 5, 2023
taogogo taocmsCross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to...CVE-2020-207256.1 MediumJune 20, 2023
taogogo taocmstaoCMS admin.php code injectionCVE-2023-19476.3 MediumApril 7, 2023
taogogo taocmsCross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain...CVE-2021-341678.8 HighFebruary 24, 2023
taogogo taocmsAn arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary...CVE-2022-480069.8 CriticalJanuary 30, 2023
taogogo taocmsAn issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side...CVE-2022-469989.8 CriticalJanuary 25, 2023
taogogo taocmsAn arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to...CVE-2022-362619.1 CriticalAugust 23, 2022
taogogo taocmsAn issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code...CVE-2022-362629.8 CriticalAugust 15, 2022
taogogo taocmsTaocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit...CVE-2021-449157.2 HighJuly 5, 2022
taogogo taocmsAn arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2...CVE-2022-238809.8 CriticalMarch 23, 2022
taogogo taocmsTaocms v3.0.2 was discovered to contain a SQL injection vulnerability via the id parameter in ...CVE-2022-255059.8 CriticalMarch 21, 2022
taogogo taocmstaocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file.CVE-2022-255789.8 CriticalMarch 18, 2022
taogogo taocmsThere is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action...CVE-2022-233808.8 HighMarch 1, 2022
taogogo taocmsTaocms v3.0.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the...CVE-2021-449694.8 MediumFebruary 10, 2022
taogogo taocmsIn taocms 3.0.1 after logging in to the background, there is an Arbitrary file download...CVE-2021-449834.9 MediumFebruary 4, 2022
taogogo taocmsAn issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can...CVE-2022-233164.9 MediumFebruary 4, 2022
taogogo taocmsTaocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path...CVE-2021-462049.8 CriticalJanuary 19, 2022
taogogo taocmsTaocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.CVE-2021-462036.5 MediumJanuary 19, 2022
taogogo taocmstaocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\include\Model\file.php from line...CVE-2021-450159.1 CriticalDecember 14, 2021
taogogo taocmsThere is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id...CVE-2021-450149.8 CriticalDecember 14, 2021
taogogo taocmsTaocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the...CVE-2021-257854.8 MediumDecember 2, 2021
taogogo taocmsTaocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function...CVE-2021-257847.2 HighDecember 2, 2021
taogogo taocmsTaocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function...CVE-2021-257837.2 HighDecember 2, 2021
taogogo taocmstaocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name...CVE-2019-77209.8 CriticalFebruary 11, 2019