Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2021-25809

Disclosure Date: July 23, 2021 (last updated February 23, 2025)
UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php.
Attacker Value
Unknown

CVE-2020-25537

Disclosure Date: November 30, 2020 (last updated February 22, 2025)
File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission.