Taogogo vulnerabilities
We track 3 vulnerabilities in Taogogo products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 30, 2023.
3vulnerabilities
3critical
0high
0exploited
9.6average CVSS score
Latest Taogogo vulnerabilities
- 9.8 Critical severity
Taocms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php.
- 9.1 Critical severity
Taocms: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt
- 9.8 Critical severity
Taocms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file.