Advisories · Technology
Sanluan PublicCMS.
Every CVE that names Sanluan PublicCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorization
- Sanluan PublicCMS
- Broken access control
- CVSS 5.3 Medium
Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization
- Sanluan PublicCMS
- Broken access control
- CVSS 5.3 Medium
PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint
- Sanluan PublicCMS
- Broken access control
- CVSS 5.1 Medium
Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization
- Sanluan PublicCMS
- Broken access control
- CVSS 5.3 Medium
Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine
- Sanluan PublicCMS
- Code injection
- CWE-791
- CVSS 6.9 Medium
Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key
- Sanluan PublicCMS
- Hard-coded credentials
- CWE-320
- CVSS 6.9 Medium
Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error
- Sanluan PublicCMS
- CWE-840
- CVSS 6.9 Medium
Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication
- Sanluan PublicCMS
- Authentication bypass
- CVSS 5.3 Medium
Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption
- Sanluan PublicCMS
- Denial of service
- CVSS 5.3 Medium
Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file
- Sanluan PublicCMS
- Information disclosure
- CWE-313
- CVSS 5.1 Medium
Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine
- Sanluan PublicCMS
- Code injection
- CWE-791
- CVSS 5.3 Medium
Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal
- Sanluan PublicCMS
- Path traversal
- CVSS 2.3 Low
Sanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization
- Sanluan PublicCMS
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization
- Sanluan PublicCMS
- Privilege escalation
- Broken access control
- CVSS 5.1 Medium
Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal
- Sanluan PublicCMS
- Path traversal
- CVSS 5.1 Medium
Sanluan PublicCMS viewer.html redirect
- Sanluan PublicCMS
- Open redirect
- CVSS 5.1 Medium
Sanluan PublicCMS preview.html redirect
- Sanluan PublicCMS
- Open redirect
- CVSS 5.3 Medium
Sanluan PublicCMS Tag Type save cross site scripting
- Sanluan PublicCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 3.5 Low
sanluan PublicCMS Tab dwz.min.js initLink cross site scripting
- sanluan PublicCMS
- CWE-707