Sucms Project vulnerabilities
We track 2 vulnerabilities in Sucms Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Sucms Project vulnerabilities
- 7.5 High severity
Sucms: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request.
- 7.5 High severity
Sucms: Improper Limitation of a Pathname to a Restricted Directory
An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request.