Luocms Project vulnerabilities
We track 2 vulnerabilities in Luocms Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 10, 2022.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Luocms Project vulnerabilities
- 9.8 Critical severity
Luocms: Incorrect Authorization
Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/template_manage.php, an attacker can write an arbitrary shell file.
- 7.5 High severity
Luocms: Improper Neutralization of Special Elements used in an SQL Command
Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information through SQL injection statements.