CyberSecBulletin

taoCMS vulnerabilities

We track 2 vulnerabilities in taoCMS products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 29, 2024.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest taoCMS vulnerabilities

  • 9.8 Critical severity

    taocms: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2024-33350taoCMSEPSS 1.82%

    Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via the include/model/file.php component.

  • 9.8 Critical severity

    taoCMS: Improper Control of Generation of Code

    CVE-2023-1947taoCMSEPSS 1.06%

    A vulnerability was found in taoCMS 3.0.2. It has been classified as critical. Affected is an unknown function of the file /admin/admin.php. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed