Skip to main content

Utcms Project

3 CVEs vendor

Monthly

CVE-2025-56407 Sep 10, 14:15 HIGH This Month

A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Utcms Utcms Project
NVD GitHub
CVSS 3.1
8.8
EPSS
0.0%
CVE-2025-9402 Aug 25, 02:15 LOW POC Monitor

A vulnerability was found in HuangDou UTCMS 9.php of the component Config Handler. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SSRF Utcms Utcms Project
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.0%
CVE-2025-9401 Aug 25, 01:15 LOW POC Monitor

A vulnerability has been found in HuangDou UTCMS 9. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

PHP Information Disclosure Utcms Utcms Project
NVD GitHub VulDB
CVSS 4.0
2.9
EPSS
0.0%
EPSS 0% CVSS 8.8
HIGH This Month

A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Utcms +1
NVD GitHub
EPSS 0% CVSS 2.0
LOW POC Monitor

A vulnerability was found in HuangDou UTCMS 9.php of the component Config Handler. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SSRF Utcms +1
NVD GitHub VulDB
EPSS 0% CVSS 2.9
LOW POC Monitor

A vulnerability has been found in HuangDou UTCMS 9. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

PHP Information Disclosure Utcms +1
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy