CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Baicloud Cms Project 1Baicloud Cms Jun 17, 2026 Feb 19, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php. |
1Baicloud Cms Project 1Baicloud Cms Jun 17, 2026 Sep 30, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php. |