Advisories · Technology

OTCMS.

Every CVE that names OTCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-6772 CVE record

CVSS 4.7 Medium

OTCMS ind_backstage.php sql injection
- OTCMS
- SQL injection
Not analysed yet 13 Dec 2023
CVE-2023-3241 CVE record

CVSS 3.5 Low

OTCMS path traversal
- OTCMS
- Path traversal
Not analysed yet 14 Jun 2023
CVE-2023-3240 CVE record

CVSS 3.5 Low

OTCMS usersNews_deal.php path traversal
- OTCMS
- Path traversal
Not analysed yet 14 Jun 2023
CVE-2023-3239 CVE record

CVSS 3.5 Low

OTCMS path traversal
- OTCMS
- Path traversal
Not analysed yet 14 Jun 2023
CVE-2023-3238 CVE record

CVSS 6.3 Medium

OTCMS server-side request forgery
- OTCMS
- Server-side request forgery (SSRF)
Not analysed yet 14 Jun 2023
CVE-2023-3237 CVE record

CVSS 6.3 Medium

OTCMS hard-coded password
- OTCMS
- Hard-coded credentials
Not analysed yet 14 Jun 2023
CVE-2023-1797 CVE record

CVSS 6.3 Medium

OTCMS unrestricted upload
- OTCMS
- Unrestricted file upload
Not analysed yet 2 Apr 2023
CVE-2023-1635 CVE record

CVSS 3.5 Low

OTCMS apiRun.php AutoRun cross site scripting
- OTCMS
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2023
CVE-2023-1634 CVE record

CVSS 6.3 Medium

OTCMS URL Parameter info_deal.php UseCurl server-side request forgery
- OTCMS
- Server-side request forgery (SSRF)
Not analysed yet 25 Mar 2023