Ftcms Security Vulnerabilities

CVE-2022-30060

ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php

CVE-2022-30061

ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp.

CVE-2022-30062

ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php

CVE-2022-30063

ftcms <=2.1 was discovered to be vulnerable to code execution attacks .

CVE-2022-37730

In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server (corresponding to the identity authentication inform...

CVE-2022-37731

ftcms 2.1 poster.PHP has a XSS vulnerability. The attacker inserts malicious JavaScript code into the web page, causing the user / administrator to trigger malicious code when accessing.