Filtered by vendor Baicloud-cms Project Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-44302 1 Baicloud-cms Project 1 Baicloud-cms 2024-08-04 8.8 High
BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.
CVE-2021-41729 1 Baicloud-cms Project 1 Baicloud-cms 2024-08-04 9.1 Critical
BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php.