HuangDou vulnerabilities
We track 3 vulnerabilities in HuangDou products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2025.
Latest HuangDou vulnerabilities
- 7.2 High severity
UTCMS: Server-Side Request Forgery
A vulnerability was found in HuangDou UTCMS 9. This issue affects some unknown processing of the file app/modules/ut-frame/admin/update.php of the component Config Handler. Performing manipulation of the argument UPDATEURL results in server-side request forger
- 7.2 High severity
UTCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/admin/sql.php. The manipulation of the argument sql leads to sql injection. The attack can be initiat
- 9.8 Critical severity
UTCMS: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection. The att