5.3
Medium
CVE-2024-9411 A vulnerability classified as problematic has been found in OFCMS 1.1.2
Description
A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument dict_value leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products and versions
Other CVEs of ofcms
The 4 CVEs of ofcms →
CVE-2024-48235
An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the…
6.5
Medium
CVE-2024-48236
An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the…
6.5
Medium
CVE-2024-34256
OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function
9.8
Critical