Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2021-44302
Disclosure Date: February 19, 2022 (last updated October 07, 2023)
BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.
0
Attacker Value
Unknown
CVE-2021-41729
Disclosure Date: September 30, 2021 (last updated November 28, 2024)
BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php.
0
