Advisories · Technology
OFCMS.
Every CVE that names OFCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
OFCMS JSON Query SysUserController.java query sql injection
- OFCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
OFCMS JSON Query SystemParamController.java query sql injection
- OFCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
OFCMS JSON Query SystemDictController.java query sql injection
- OFCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
OFCMS ComnController ComnController.java query sql injection
- OFCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
OFCMS cross-site request forgery
- OFCMS
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 5.3 Medium
OFCMS add.json add cross site scripting
- OFCMS
- Cross-site scripting (XSS)