5.3
Moyenne
CVE-2024-9411 A vulnerability classified as problematic has been found in OFCMS 1.1.2
Description
A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument dict_value leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Produits et versions touchés
Autres CVE de ofcms
Les 4 CVE de ofcms →
CVE-2024-48235
An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the…
6.5
Moyenne
CVE-2024-48236
An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the…
6.5
Moyenne
CVE-2024-34256
OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function
9.8
Critique