Taocms vulnerabilities
3 known vulnerabilities in Taocms from Taogogo. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Taocms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php.
- 9.1 Critical severity
Taocms: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt
- 9.8 Critical severity
Taocms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file.