Skip to content
OpenAdvisories

Product · HuangDou

UTCMS

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-9402

    HuangDou UTCMS Config update.php server-side request forgery

    A vulnerability was found in HuangDou UTCMS 9. This issue affects some unknown processing of the file app/modules/ut-frame/admin/update.php of the component Config Handler. Performing manipulation of the argument UPDATEURL results in server-side request forge…

    HuangDou UTCMS
  • Medium 4.7
    CVE-2024-9918

    HuangDou UTCMS sql.php RunSql sql injection

    A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/admin/sql.php. The manipulation of the argument sql leads to sql injection. The attack can be initia…

    HuangDou UTCMS
  • Medium 6.3
    CVE-2024-9917

    HuangDou UTCMS template_creat.php deserialization

    A vulnerability, which was classified as critical, was found in HuangDou UTCMS V9. This affects an unknown part of the file app/modules/ut-template/admin/template_creat.php. The manipulation of the argument content leads to deserialization. It is possible to …

    HuangDou UTCMS