Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2537▼ 356 respecto a la semana anterior

Críticas / altas1341▲ 75 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

11 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-24609	Modificada	Crítica (9.8)	1.6%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/template_manage.php, an attacker can write an arbitrary shell file.
CVE-2022-24608	Modificada	Media (6.1)	0.68%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.
CVE-2022-24607	Modificada	Crítica (9.8)	1.2%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.
CVE-2022-24606	Modificada	Crítica (9.8)	1.2%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.
CVE-2022-24605	Modificada	Crítica (9.8)	1.2%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.
CVE-2022-24604	Modificada	Crítica (9.8)	1.2%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.
CVE-2022-24603	Modificada	Crítica (9.8)	1.2%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.
CVE-2022-24602	Modificada	Crítica (9.8)	1.2%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.
CVE-2022-24601	Modificada	Alta (7.5)	1.2%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information through SQL injection statements.
CVE-2022-24600	Modificada	Crítica (9.8)	1.3%	—	Luocms Project Luocms	10/3/2022	17/6/2026	Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements.
CVE-2008-6281	Modificada	Alta (7.5)	0.99%	—	Bluocms Bluo CMS	25/2/2009	16/6/2026	SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.