📦 Taocms

A directory traversal vulnerability in TaoCMS v3.0.2 allows remote attackers to write arbitrary files via the include/model/file.php component. This can lead to remote code execution and sensitive inf...

This vulnerability allows attackers to upload malicious PHP files through taoCMS's File Management module, leading to remote code execution. It affects all taoCMS v3.0.2 installations with the vulnera...

CVE-2022-25505 is a critical SQL injection vulnerability in Taocms v3.0.2 that allows attackers to execute arbitrary SQL commands via the id parameter in Category.php. This affects all users running t...

Taocms v3.0.2 contains both an arbitrary file read vulnerability via the path parameter and an SQL injection vulnerability in Article.php. This allows attackers to read sensitive files from the server...

CVE-2021-45015 is an arbitrary file deletion vulnerability in TaoCMS that allows attackers to delete any file on the server. This affects TaoCMS 3.0.2 installations where attackers can exploit insuffi...

This CSRF vulnerability in taoCMS 3.0.2 allows attackers to trick authenticated administrators into performing unintended actions, potentially granting attackers escalated privileges. It affects all t...

CVE-2021-25784 is a blind SQL injection vulnerability in Taocms v2.5Beta5 that allows attackers to execute arbitrary SQL commands through the Edit Article function. This affects all users running the ...