CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 07/09/2022 |
| CVE-2022-37730 | HIGH8.8 | In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server (corresponding to the identity authentication information) as the victim | 07/09/2022 |
| CVE-2022-30063 | CRITICAL9.8 | ftcms <=2.1 was discovered to be vulnerable to code execution attacks . | 11/05/2022 |
| CVE-2022-30062 | MEDIUM6.5 | ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php | 11/05/2022 |
| CVE-2022-30061 | MEDIUM6.5 | ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp. | 11/05/2022 |
| CVE-2022-30060 | HIGH8.8 | ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php | 11/05/2022 |