Advisories · Technology

HuangDou UTCMS.

Every CVE that names HuangDou UTCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-9402 CVE record

CVSS 5.1 Medium

HuangDou UTCMS Config update.php server-side request forgery
- HuangDou UTCMS
- Server-side request forgery (SSRF)
Not analysed yet 25 Aug 2025
CVE-2025-9401 CVE record

CVSS 6.3 Medium

HuangDou UTCMS Login login.php comparison
- HuangDou UTCMS
- CWE-697
Not analysed yet 25 Aug 2025
CVE-2024-9918 CVE record

CVSS 5.1 Medium

HuangDou UTCMS sql.php RunSql sql injection
- HuangDou UTCMS
- SQL injection
Not analysed yet 13 Oct 2024
CVE-2024-9917 CVE record

CVSS 5.3 Medium

HuangDou UTCMS template_creat.php deserialization
- HuangDou UTCMS
- Insecure deserialization
Not analysed yet 13 Oct 2024
CVE-2024-9916 CVE record

CVSS 6.9 Medium

HuangDou UTCMS cli.php os command injection
- HuangDou UTCMS
- Command injection
Not analysed yet 13 Oct 2024