Skip to content
OpenAdvisories

Product · CAYIN Technology

CMS-SE

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-7729

    CAYIN Technology CMS - Sensitive File Download

    The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.

    CAYIN Technology SMP-8000 CMS-SE SMP-2200
  • High 7.2
    CVE-2024-7728

    CAYIN Technology CMS - OS Command Injection

    The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.

    CAYIN Technology CMS-SE(18.04) CMS-SE(22.04) CMS-SE