Sucms vulnerabilities

2 known vulnerabilities in Sucms from Sucms Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Sucms: Server-Side Request Forgery

  CVE-2025-25760Feb 27, 2025Sucms Project

  A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request.

• 7.5 High severity

  Sucms: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-25759Feb 27, 2025Sucms Project

  An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request.