Usualtool Usualtoolcms — known CVE vulnerabilities

Every CVE whose affected-product data names Usualtool Usualtoolcms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2018-18422 — CVSS 8.8 (high): UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI.
• CVE-2019-6244 — CVSS 8.8 (high): An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlbackx.php?t=sql allows CSRF attacks that can execute SQL statements, and…
• CVE-2018-20128 — CVSS 7.5 (high): An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files via a backname[]…
• CVE-2024-9916 — CVSS 7.3 (high): A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown…
• CVE-2024-9917 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, was found in HuangDou UTCMS V9. This affects an unknown part of the file…
• CVE-2024-9918 — CVSS 4.7 (medium): A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file…