CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 07/09/2022 |
| CVE-2022-37730 | 高危8.8 | In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server (corresponding to the identity authentication information) as the victim | 07/09/2022 |
| CVE-2022-30063 | 严重9.8 | ftcms <=2.1 was discovered to be vulnerable to code execution attacks . | 11/05/2022 |
| CVE-2022-30062 | 中危6.5 | ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php | 11/05/2022 |
| CVE-2022-30061 | 中危6.5 | ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp. | 11/05/2022 |
| CVE-2022-30060 | 高危8.8 | ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php | 11/05/2022 |