taogogo taocms issues - Githubissues

taogogo / taocms

taoCMS is an incredible tiny CMS( Content Management System) , writen in PHP and support MySQL/Sqlite as the database(MIT License)

MIT License

60 stars 21 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

安装问题

#37 museions opened 10 months ago
0
There is a stored cross-site scripting attack in "Friendly Links" (column administrator rights)

#36 Lejeremiah opened 11 months ago
0
File upload vulnerability exists by modifying Upload.php configuration in backend.

#35 xiaoabai opened 1 year ago
0
Bypass security protection injection code in the website settings function

#34 chasingboy opened 2 years ago
0
可通过后台修改config.php文件导致getshell

#33 suifeng-kali opened 2 years ago
0
Add a security policy

#32 JamieSlome opened 2 years ago
0
无法安装

#31 gaoyuoppa closed 2 years ago
2
There is a storage xss in the add module of friendly links in Taocms3.0.2.

#30 debug601 opened 2 years ago
0
There is a storage XSS vulnerability in the add column of Taocms3.0.2 's management column.

#29 debug601 opened 2 years ago
0
Code injection caused by arbitrary file editing vulnerability in taocms3.0.2

#28 debug601 opened 2 years ago
0
taocms3.0.2 SQL injection exists in the background

#27 zhendezuile opened 2 years ago
0
A malicious file upload vulnerability exists in File.php of the file management function module.

#25 metaStor opened 2 years ago
0
SQL blind annotation exists in admin.php page of Comment function

#24 Am1azi3ng opened 2 years ago
0
There is SQL blind injection at "Comment Update"

#23 xuchaofan opened 2 years ago
0
There is SQL blind injection at "Link Del"

#22 Whippet0 opened 2 years ago
0
There is SQL blind injection at "Category Del"

#21 Whippet0 opened 2 years ago
0
There is SQL blind injection at "Category Update"

#20 Whippet0 opened 2 years ago
0
There is SQL blind injection at "Category Edit"

#19 Whippet0 opened 2 years ago
0
There is SQL blind injection at "Cms Del"

#18 Whippet0 opened 2 years ago
0
There is SQL blind injection at "Admin Update"

#17 Whippet0 opened 2 years ago
0
There is SQL blind injection at "Admin Edit"

#16 Whippet0 opened 2 years ago
0
arbitrary file read vulnerability

#15 destinypwd opened 2 years ago
1
There is SQL blind injection at "Management Link"

#14 bkfish opened 2 years ago
0
arbitrary file read vulnerability

#13 bkfish opened 2 years ago
0
exist is an arbitrary file delete vulnerability

#12 win1498419293 opened 2 years ago
0
There is SQL blind injection at "Management article"

#11 win1498419293 opened 2 years ago
0
There is a Arbitrary file download attack at " File Management column"(administrator authority)

#10 7wkajk opened 2 years ago
0
There is a storage type cross site scripting attack at "Management column"(Column administrator authority)

#9 liangyueliangyue opened 2 years ago
0
There is SQL blind injection at "Edit category"(Column administrator authority)

#8 UUFR opened 2 years ago
0
There is a storage type cross site scripting attack at “Collection management”(Column administrator authority)

#7 YUKIDD opened 2 years ago
0
There are two CSRF vulnerabilities that can add administrator account and change administrator password

#6 f1rstb100d closed 3 years ago
1
There is SQL blind injection at "Article search"(Column administrator authority)

#5 ddddbhm closed 3 years ago
1
There is SQL blind injection at "Edit article"(Column administrator authority)

#4 ddddbhm closed 3 years ago
1
There is a storage type cross site scripting attack at "Management column"(Column administrator authority)

#3 ddddbhm closed 3 years ago
1
Cross Site Scripting

#2 PPPio closed 3 years ago
1
one can insert malicious code in the installation process to get a web shell

#1 jadacheng closed 3 years ago
2